Ubuntu
xz-utils package

xz-utils 5.2.2-1.3ubuntu0.1 source package in Ubuntu

Changelog

xz-utils (5.2.2-1.3ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: arbitrary file overwrite or code execution with
    crafted file names
    - debian/patches/CVE-2022-1271.patch: fix escaping of malicious
      filenames in src/scripts/xzgrep.in.
    - CVE-2022-1271

 -- Marc Deslauriers <email address hidden>  Fri, 08 Apr 2022 08:56:46 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
utils
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates main utils
Bionic security main utils

Downloads

File Size SHA-256 Checksum
xz-utils_5.2.2.orig.tar.xz 992.6 KiB f341b1906ebcdde291dd619399ae944600edc9193619dd0c0110a5f05bfcc89e
xz-utils_5.2.2.orig.tar.xz.asc 543 bytes 2cc0575556e1331b3f468e6e7dca5969ce86efcc315d62672279b4e68b2e449f
xz-utils_5.2.2-1.3ubuntu0.1.debian.tar.xz 107.5 KiB caaaa38bd5d1be55af093b1dcbd48676f1f07ce127e5e0472486b4c1d44c5cfd
xz-utils_5.2.2-1.3ubuntu0.1.dsc 2.6 KiB 3f47e5214a1d40c2df2309cda1293f5e5faf847932f72c9499955a5f1c0c2a33

View changes file

Binary packages built by this source

liblzma-dev: XZ-format compression library - development files

 XZ is the successor to the Lempel-Ziv/Markov-chain Algorithm
 compression format, which provides memory-hungry but powerful
 compression (often better than bzip2) and fast, easy decompression.
 .
 The native format of liblzma is XZ; it also supports raw (headerless)
 streams and the older LZMA format used by lzma. (For 7-Zip's related
 format, use the p7zip package instead.) This package provides the
 development library needed to build programs using liblzma.

liblzma-doc: XZ-format compression library - API documentation

 This package contains a reference manual for the liblzma data
 compression library, in Doxygen-generated HTML files. The purpose
 of each struct, macro, and function in the public interface is
 explained.

liblzma5: XZ-format compression library

 XZ is the successor to the Lempel-Ziv/Markov-chain Algorithm
 compression format, which provides memory-hungry but powerful
 compression (often better than bzip2) and fast, easy decompression.
 .
 The native format of liblzma is XZ; it also supports raw (headerless)
 streams and the older LZMA format used by lzma. (For 7-Zip's related
 format, use the p7zip package instead.)

liblzma5-dbgsym: debug symbols for liblzma5
xz-utils: XZ-format compression utilities

 XZ is the successor to the Lempel-Ziv/Markov-chain Algorithm
 compression format, which provides memory-hungry but powerful
 compression (often better than bzip2) and fast, easy decompression.
 .
 This package provides the command line tools for working with XZ
 compression, including xz, unxz, xzcat, xzgrep, and so on. They can
 also handle the older LZMA format, and if invoked via appropriate
 symlinks will emulate the behavior of the commands in the lzma
 package.
 .
 The XZ format is similar to the older LZMA format but includes some
 improvements for general use:
 .
  * 'file' magic for detecting XZ files;
  * crc64 data integrity check;
  * limited random-access reading support;
  * improved support for multithreading (not used in xz-utils);
  * support for flushing the encoder.

xz-utils-dbgsym: debug symbols for xz-utils
xzdec: XZ-format compression utilities - tiny decompressors

 XZ is the successor to the Lempel-Ziv/Markov-chain Algorithm
 compression format, which provides memory-hungry but powerful
 compression (often better than bzip2) and fast, easy decompression.
 .
 This package provides the xzdec and lzmadec utilities, which write
 the decompressed version of a compressed file to standard output. The
 binaries are very small, so they can be easily stored on small media
 with some compressed files, and they are linked statically against
 liblzma so they can be used on machines without a compatible version
 of liblzma installed. However, they have:
 .
   * no compression support;
   * no support for writing to a file other than standard output;
   * no translated messages;
   * been optimized for size rather than speed.
 .
 For a full-featured xzcat command without these limitations, use
 the xz-utils package instead.

xzdec-dbgsym: debug symbols for xzdec