Security update for xz
Announcement ID: | SUSE-SU-2025:1137-1 |
---|---|
Release Date: | 2025-04-03T15:11:09Z |
Rating: | important |
References: | |
Cross-References: | |
CVSS scores: |
|
Affected Products: |
|
An update that solves one vulnerability can now be installed.
Description:
This update for xz fixes the following issues:
- CVE-2025-31115: Fixed heap use after free and writing to an address based on the null pointer plus an offset (bsc#1240414)
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.6
zypper in -t patch SUSE-2025-1137=1 openSUSE-SLE-15.6-2025-1137=1
-
Basesystem Module 15-SP6
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-1137=1
Package List:
-
openSUSE Leap 15.6 (x86_64)
- xz-devel-32bit-5.4.1-150600.3.3.1
- liblzma5-32bit-5.4.1-150600.3.3.1
- liblzma5-32bit-debuginfo-5.4.1-150600.3.3.1
-
openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586)
- xz-static-devel-5.4.1-150600.3.3.1
- xz-devel-5.4.1-150600.3.3.1
- xz-debugsource-5.4.1-150600.3.3.1
- xz-debuginfo-5.4.1-150600.3.3.1
- liblzma5-debuginfo-5.4.1-150600.3.3.1
- xz-5.4.1-150600.3.3.1
- liblzma5-5.4.1-150600.3.3.1
-
openSUSE Leap 15.6 (noarch)
- xz-lang-5.4.1-150600.3.3.1
-
openSUSE Leap 15.6 (aarch64_ilp32)
- liblzma5-64bit-debuginfo-5.4.1-150600.3.3.1
- xz-devel-64bit-5.4.1-150600.3.3.1
- liblzma5-64bit-5.4.1-150600.3.3.1
-
Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64)
- xz-static-devel-5.4.1-150600.3.3.1
- xz-devel-5.4.1-150600.3.3.1
- xz-debugsource-5.4.1-150600.3.3.1
- xz-debuginfo-5.4.1-150600.3.3.1
- liblzma5-debuginfo-5.4.1-150600.3.3.1
- xz-5.4.1-150600.3.3.1
- liblzma5-5.4.1-150600.3.3.1
-
Basesystem Module 15-SP6 (noarch)
- xz-lang-5.4.1-150600.3.3.1
-
Basesystem Module 15-SP6 (x86_64)
- liblzma5-32bit-5.4.1-150600.3.3.1
- liblzma5-32bit-debuginfo-5.4.1-150600.3.3.1