This bug was fixed in the package xz-utils - 5.8.3-1ubuntu1
---------------
xz-utils (5.8.3-1ubuntu1) stonking; urgency=medium
* SECURITY UPDATE: invalid memory write during decoder reinitialization
after allocation failure (LP: #2170056)
- debian/patches/LP-2170056_1.patch: Make lzma_lz_decoder_init()
safe to reinit after alloc failure in src/liblzma/lz/lz_decoder.c.
- debian/patches/LP-2170056_2.patch: Clean up after a filter chain
initialization error in src/liblzma/common/alone_decoder.c,
src/liblzma/common/lzip_decoder.c,
src/liblzma/common/microlzma_decoder.c.
- debian/patches/LP-2170056_3.patch: Test lzma_alone_decoder() reuse
after dictionary allocation failure in tests/Makefile.am,
tests/test_alone_decoder.c, tests/tests.cmake.
- No CVE number
-- Shafayat Hossain Majumder <[email protected]> Fri, 09
Oct 2026 11:54:18 -0400
** Changed in: xz-utils (Ubuntu)
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2170056
Title:
5.8.4 security tracking bug
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xz-utils/+bug/2170056/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
