Bug#1138185: trixie-pu: package 7zip/26.01+dfsg-1~deb13u1

Hello,

Vulnerability fix in 7zip 26.02 update was now disclosed as ZDI-26-444
and CVE-2026-14266.

* https://www.zerodayinitiative.com/advisories/ZDI-26-444/
> Vulnerability Details
> This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
> The specific flaw exists within the processing of XZ chunked data. Crafted XZ-compressed data can trigger an overflow of a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
>
> Additional Details
> Fixed in 7-Zip 26.02

--
YOKOTA Hiroshi