Josef Schlehofer 7cda9bbbe8 xz: update to 5.8.4 ...

Fixes GHSA-5qpq-xqfv-j9pg: after a failed memory allocation,
reinitializing an existing .lzma, .lz or MicroLZMA decoder to decode a
different file could access invalid memory and at least crash. It
affects all XZ Utils versions since 5.0.0.

The release also fixes a wrong error code in lzma_stream_buffer_decode()
and a slowdown of lzma_index_cat() with crafted files that made
"xz --list" appear to hang.

Release notes:
https://github.com/tukaani-project/xz/releases/tag/v5.8.4

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

2026-09-28 11:10:45 +03:00

..

patches

xz: update to 5.8.1

2025-07-28 09:31:33 +03:00

Makefile

xz: update to 5.8.4

2026-09-28 11:10:45 +03:00