Format: 1.8
Date: Mon, 15 Apr 2024 14:15:02 -0700
Source: xz-utils
Binary: liblzma5 liblzma5-udeb xz-utils xzdec liblzma-dev liblzma-doc
Architecture: source
Version: 5.4.6-0ubuntu1~22.04.sav1
Distribution: jammy
Urgency: medium
Maintainer: Jonathan Nieder <jrnieder@gmail.com>
Changed-By: Rob Savoury <savoury@savos.tech>
Description:
 liblzma-dev - XZ-format compression library - development files
 liblzma-doc - XZ-format compression library - API documentation
 liblzma5   - XZ-format compression library
 liblzma5-udeb - XZ-format compression library (udeb)
 xz-utils   - XZ-format compression utilities
 xzdec      - XZ-format compression utilities - tiny decompressors
Changes:
 xz-utils (5.4.6-0ubuntu1~22.04.sav1) jammy; urgency=medium
 .
   * Response to CVE-2024-3094 backdoor (new upstream changes from April 2024):
     - d/patches/: Add cve-2024-3094-doc-changes-part{1,2,3}.patch (upstream)
         to show current correct maintainer and URL info (removes "Jia Tan")
       - Add cve-2024-3094-doc-changes-part4.patch to purge the evildoer from
         documentation in several additional files not yet changed by upstream
     - NOTE: No ifunc support was in any xz-utils source prior to v5.5.1alpha,
       and at this time all available information about CVE-2024-3094 says that
       the backdoor relied upon ifunc to operate, so this version 5.4.6 should
       not be vulnerable (and as soon as upstream makes a new release with all
       changes by "Jia Tan" removed that release will be published at the PPAs)
Checksums-Sha1:
 f989f0a89bc46a2b4e909290a694a80cd98f9f07 2512 xz-utils_5.4.6-0ubuntu1~22.04.sav1.dsc
 b9c12e4712bdde3aeb79b1f7416ed8161e9510f1 31448 xz-utils_5.4.6-0ubuntu1~22.04.sav1.debian.tar.xz
Checksums-Sha256:
 964055039eb13651a0716f92ccca611df9e743fd7ee499fba4fc3c39e5194063 2512 xz-utils_5.4.6-0ubuntu1~22.04.sav1.dsc
 66c65242146edcc3fd0a5e16a6cefa1998924d9bbf63160a5873731cfa2a0b37 31448 xz-utils_5.4.6-0ubuntu1~22.04.sav1.debian.tar.xz
Files:
 d54d3b5783bc6401ebf7d0feb5e06dc0 2512 utils optional xz-utils_5.4.6-0ubuntu1~22.04.sav1.dsc
 abea3892bf4e34d83a9f32cc646fd980 31448 utils optional xz-utils_5.4.6-0ubuntu1~22.04.sav1.debian.tar.xz