On Thu, 20 Nov 2025 20:08:01 +0100 Philipp Matthias Hahn <[email protected]> wrote: > Therefore it would help if Debian could cherry-pick > https://github.com/tukaani-project/xz/commit/5630c33a43a28a3d11030aa9d25fa8617e98da91 > into `xz-utils` and release fixed versions for both "stable-security" > and "unstable".
I wrote the above commit and linked to it from the xz issue[1], where you have commented too. Have you tested that this workaround actually works on a buggy RHEL 9 kernel? So far I haven't heard any reports, via any communication channel, if the commit works or not. Currently the commit only exists in a temporary branch, so if something like it is merged, the final version might differ. [1] https://github.com/tukaani-project/xz/issues/199 -- Lasse Collin
