UbuntuUpdates.org

Package "xz-utils"

Name: xz-utils

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • XZ-format compression utilities - tiny decompressors
Latest version: 5.8.3-1ubuntu1
Release: stonking (26.10)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "xz-utils" in Stonking

Repository Area Version
base universe 5.8.3-1
base main 5.8.3-1
security main 5.8.3-1ubuntu1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 5.8.3-1ubuntu1 2026-10-20 17:08:16 UTC

xz-utils (5.8.3-1ubuntu1) stonking; urgency=medium

  * SECURITY UPDATE: invalid memory write during decoder reinitialization
    after allocation failure (LP: #2170056)
    - debian/patches/LP-2170056_1.patch: Make lzma_lz_decoder_init()
      safe to reinit after alloc failure in src/liblzma/lz/lz_decoder.c.
    - debian/patches/LP-2170056_2.patch: Clean up after a filter chain
      initialization error in src/liblzma/common/alone_decoder.c,
      src/liblzma/common/lzip_decoder.c,
      src/liblzma/common/microlzma_decoder.c.
    - debian/patches/LP-2170056_3.patch: Test lzma_alone_decoder() reuse
      after dictionary allocation failure in tests/Makefile.am,
      tests/test_alone_decoder.c, tests/tests.cmake.
    - No CVE number

 -- Shafayat Hossain Majumder Fri, 09 Oct 2026 11:54:18 -0400
2170056 5.8.4 security tracking bug


About   -   Send Feedback to @ubuntu_updates