** Description changed: - tracking bug + Ubuntu carries one change on top of the 5.8.3-1 sync: a security update + for LP: #2170056, implemented as three quilt patches: + + * debian/patches/LP-2170056_1.patch: Make lzma_lz_decoder_init() safe + to reinit after alloc failure. + * debian/patches/LP-2170056_2.patch: Clean up after a filter chain + initialization error in alone_decoder.c, lzip_decoder.c, + microlzma_decoder.c. + * debian/patches/LP-2170056_3.patch: Test lzma_alone_decoder() reuse + after dictionary allocation failure. + + All three are backports of upstream commits that shipped in the 5.8.4 + release, so they are no longer needed. This was verified by applying each patch to 5.8.4 and seeing that there was no change. Since there is no longer any Ubuntu delta, the Ubuntu changes should be overridden. + + Changelog entries since 5.8.3-1ubuntu1: + + xz-utils (5.8.4-1) unstable; urgency=medium + + * Import 5.8.4 + - See notes https://github.com/tukaani-project/xz/releases/tag/v5.8.4 + - Includes security fix for GHSA-5qpq-xqfv-j9pg (Closes: #1147318) + * Drop man page syntax patch now mostly addressed upstream + * Backport upstream commit to fix test_files.sh failure with --disable-xz + * Bump Debhelper version from 13 to 14 + * Bump Debian Policy version to 4.7.4 + -- Otto Kekäläinen <[email protected]> Wed, 09 Sep 2026 18:18:18 +0000
** Description changed: Ubuntu carries one change on top of the 5.8.3-1 sync: a security update for LP: #2170056, implemented as three quilt patches: - * debian/patches/LP-2170056_1.patch: Make lzma_lz_decoder_init() safe - to reinit after alloc failure. - * debian/patches/LP-2170056_2.patch: Clean up after a filter chain - initialization error in alone_decoder.c, lzip_decoder.c, - microlzma_decoder.c. - * debian/patches/LP-2170056_3.patch: Test lzma_alone_decoder() reuse - after dictionary allocation failure. + * debian/patches/LP-2170056_1.patch: Make lzma_lz_decoder_init() safe + to reinit after alloc failure. + * debian/patches/LP-2170056_2.patch: Clean up after a filter chain + initialization error in alone_decoder.c, lzip_decoder.c, + microlzma_decoder.c. + * debian/patches/LP-2170056_3.patch: Test lzma_alone_decoder() reuse + after dictionary allocation failure. All three are backports of upstream commits that shipped in the 5.8.4 - release, so they are no longer needed. This was verified by applying each patch to 5.8.4 and seeing that there was no change. Since there is no longer any Ubuntu delta, the Ubuntu changes should be overridden. + release, so they are no longer needed. This was verified by applying + each patch to 5.8.4 and seeing that there was no change. Since there is + no longer any Ubuntu delta, the Ubuntu changes should be overridden. Changelog entries since 5.8.3-1ubuntu1: xz-utils (5.8.4-1) unstable; urgency=medium - * Import 5.8.4 - - See notes https://github.com/tukaani-project/xz/releases/tag/v5.8.4 - - Includes security fix for GHSA-5qpq-xqfv-j9pg (Closes: #1147318) - * Drop man page syntax patch now mostly addressed upstream - * Backport upstream commit to fix test_files.sh failure with --disable-xz - * Bump Debhelper version from 13 to 14 - * Bump Debian Policy version to 4.7.4 - -- Otto Kekäläinen <[email protected]> Wed, 09 Sep 2026 18:18:18 +0000 + * Import 5.8.4 + - See notes https://github.com/tukaani-project/xz/releases/tag/v5.8.4 + - Includes security fix for GHSA-5qpq-xqfv-j9pg (Closes: #1147318) + * Drop man page syntax patch now mostly addressed upstream + * Backport upstream commit to fix test_files.sh failure with --disable-xz + * Bump Debhelper version from 13 to 14 + * Bump Debian Policy version to 4.7.4 + -- Otto Kekäläinen <[email protected]> Wed, 09 Sep 2026 18:18:18 +0000 ** Summary changed: - Please sync xz-utils 5.8.4-1 from Debian unstable + Sync xz-utils 5.8.4-1 from Debian unstable -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2173332 Title: Sync xz-utils 5.8.4-1 from Debian unstable To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/xz-utils/+bug/2173332/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
