Publishing details

• Published on 2024-04-15

Changelog

xz-utils (5.4.6-0ubuntu1~16.04.sav1) xenial; urgency=medium

  * Response to CVE-2024-3094 backdoor (new upstream changes from April 2024):
    - d/patches/: Add cve-2024-3094-doc-changes-part{1,2,3}.patch (upstream)
        to show current correct maintainer and URL info (removes "Jia Tan")
      - Add cve-2024-3094-doc-changes-part4.patch to purge the evildoer from
        documentation in several additional files not yet changed by upstream
    - NOTE: No ifunc support was in any xz-utils source prior to v5.5.1alpha,
      and at this time all available information about CVE-2024-3094 says that
      the backdoor relied upon ifunc to operate, so this version 5.4.6 should
      not be vulnerable (and as soon as upstream makes a new release with all
      changes by "Jia Tan" removed that release will be published at the PPAs)

 -- Rob Savoury <email address hidden>  Mon, 15 Apr 2024 14:15:02 -0700

Builds

• amd64
• i386

Built packages

• liblzma-dev XZ-format compression library - development files

• liblzma-doc XZ-format compression library - API documentation

• liblzma5 XZ-format compression library

• liblzma5-udeb XZ-format compression library

• xz-utils XZ-format compression utilities

• xzdec XZ-format compression utilities - tiny decompressors

Package files

• liblzma-dev_5.4.6-0ubuntu1~16.04.sav1_amd64.deb (302.6 KiB)
• liblzma-dev_5.4.6-0ubuntu1~16.04.sav1_i386.deb (309.1 KiB)
• liblzma-doc_5.4.6-0ubuntu1~16.04.sav1_all.deb (222.3 KiB)
• liblzma5-udeb_5.4.6-0ubuntu1~16.04.sav1_amd64.udeb (82.9 KiB)
• liblzma5-udeb_5.4.6-0ubuntu1~16.04.sav1_i386.udeb (92.7 KiB)
• liblzma5_5.4.6-0ubuntu1~16.04.sav1_amd64.deb (245.5 KiB)
• liblzma5_5.4.6-0ubuntu1~16.04.sav1_i386.deb (255.3 KiB)
• xz-utils_5.4.6-0ubuntu1~16.04.sav1.debian.tar.xz (30.8 KiB)
• xz-utils_5.4.6-0ubuntu1~16.04.sav1.dsc (2.5 KiB)
• xz-utils_5.4.6-0ubuntu1~16.04.sav1_amd64.deb (504.2 KiB)
• xz-utils_5.4.6-0ubuntu1~16.04.sav1_i386.deb (507.6 KiB)
• xz-utils_5.4.6.orig.tar.xz (1.6 MiB)
• xzdec_5.4.6-0ubuntu1~16.04.sav1_amd64.deb (197.9 KiB)
• xzdec_5.4.6-0ubuntu1~16.04.sav1_i386.deb (198.8 KiB)