========================================================================== Ubuntu Security Notice USN-7414-1 April 03, 2025
xz-utils vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.10 - Ubuntu 24.04 LTS Summary: XZ Utils could be made to crash or run programs if it opened a specially crafted file. Software Description: - xz-utils: XZ-format compression utilities Details: Harri K. Koskinen discovered that XZ Utils incorrectly handled the threaded xz decoder. If a user or automated system were tricked into processing an xz file, a remote attacker could use this issue to cause XZ Utils to crash, resulting in a denial of service, or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.10 xz-utils 5.6.2-2ubuntu0.2 Ubuntu 24.04 LTS xz-utils 5.6.1+really5.4.5-1ubuntu0.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7414-1 CVE-2025-31115 Package Information: https://launchpad.net/ubuntu/+source/xz-utils/5.6.2-2ubuntu0.2 https://launchpad.net/ubuntu/+source/xz-utils/5.6.1+really5.4.5-1ubuntu0.2
OpenPGP_signature.asc
Description: OpenPGP digital signature
