*** This bug is a security vulnerability *** Public security bug reported:
XZ Utils: Invalid write if a decoder is reinitialized after allocation failure https://github.com/tukaani-project/xz/security/advisories/GHSA-5qpq- xqfv-j9pg ** Affects: xz-utils (Ubuntu) Importance: Undecided Status: New ** Affects: xz-utils (Ubuntu Trusty) Importance: Undecided Status: New ** Affects: xz-utils (Ubuntu Xenial) Importance: Undecided Status: New ** Affects: xz-utils (Ubuntu Bionic) Importance: Undecided Status: New ** Affects: xz-utils (Ubuntu Focal) Importance: Undecided Status: New ** Affects: xz-utils (Ubuntu Jammy) Importance: Undecided Status: New ** Affects: xz-utils (Ubuntu Noble) Importance: Undecided Status: New ** Affects: xz-utils (Ubuntu Resolute) Importance: Undecided Status: New ** Affects: xz-utils (Ubuntu Stonking) Importance: Undecided Status: New ** Also affects: xz-utils (Ubuntu Focal) Importance: Undecided Status: New ** Also affects: xz-utils (Ubuntu Xenial) Importance: Undecided Status: New ** Also affects: xz-utils (Ubuntu Stonking) Importance: Undecided Status: New ** Also affects: xz-utils (Ubuntu Bionic) Importance: Undecided Status: New ** Also affects: xz-utils (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: xz-utils (Ubuntu Resolute) Importance: Undecided Status: New ** Also affects: xz-utils (Ubuntu Noble) Importance: Undecided Status: New ** Also affects: xz-utils (Ubuntu Jammy) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2170056 Title: 5.8.4 security tracking bug To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/xz-utils/+bug/2170056/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
