XZ Utils 5.2.11 and 5.4.2 are available at <https://tukaani.org/xz/>.
The Doxygen-generated liblzma API documentation is now available online at <https://tukaani.org/xz/liblzma-api/files.html>. Please let us know if there is interest in more releases for the 5.2 branch. Jia Tan and I will plan further bug-fix releases for this branch only if people will use it. Future release tarballs might be signed by Jia Tan. Recently he has done most of the work in XZ Utils. :-) Here is an extract from the NEWS file: 5.2.11 (2023-03-18) * Removed all possible cases of null pointer + 0. It is undefined behavior in C99 and C17. This was detected by a sanitizer and had not caused any known issues. * Build systems: - Added a workaround for building with GCC on MicroBlaze Linux. GCC 12 on MicroBlaze doesn't support the __symver__ attribute even though __has_attribute(__symver__) returns true. The build is now done without the extra RHEL/CentOS 7 symbols that were added in XZ Utils 5.2.7. The workaround only applies to the Autotools build (not CMake). - CMake: Ensure that the C compiler language is set to C99 or a newer standard. - CMake changes from XZ Utils 5.4.1: * Added a workaround for a build failure with windres from GNU binutils. * Included the Windows resource files in the xz and xzdec build rules. 5.4.2 (2023-03-18) * All fixes from 5.2.11 that were not included in 5.4.1. * If xz is built with support for the Capsicum sandbox but running in an environment that doesn't support Capsicum, xz now runs normally without sandboxing instead of exiting with an error. * liblzma: - Documentation was updated to improve the style, consistency, and completeness of the liblzma API headers. - The Doxygen-generated HTML documentation for the liblzma API header files is now included in the source release and is installed as part of "make install". All JavaScript is removed to simplify license compliance and to reduce the install size. - Fixed a minor bug in lzma_str_from_filters() that produced too many filters in the output string instead of reporting an error if the input array had more than four filters. This bug did not affect xz. * Build systems: - autogen.sh now invokes the doxygen tool via the new wrapper script doxygen/update-doxygen, unless the command line option --no-doxygen is used. - Added microlzma_encoder.c and microlzma_decoder.c to the VS project files for Windows and to the CMake build. These should have been included in 5.3.2alpha. * Tests: - Added a test to the CMake build that was forgotten in the previous release. - Added and refactored a few tests. * Translations: - Updated the Brazilian Portuguese translation. - Added Brazilian Portuguese man page translation. -- Lasse Collin