Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 40: 2025-4871b31998 moderate: perl-Compress-Raw-Lzma heap bug

fedora
Calendar Grey May 10, 2025
Dist Fedora Esm H88
The perl-Compress-Raw-Lzma package in Fedora 40 has been enhanced to resolve a heap overflow issue found in the xz library, thereby boosting both its stability and security.
xz 5.8.1

Summary

This module provides a Perl interface to the lzma compression library.

It is used by IO::Compress::Lzma.

Update Information:

xz 5.8.1

Topics%20covered

Topics Covered

security advisory update Fedora perl module heap bug lzma compression

Change Log

* Thu Apr 3 2025 Richard W.M. Jones - 2.209-9 - Rebuild against xz 5.8.1

References


[ 1 ] Bug #2357251 - CVE-2025-31115 xz: XZ has a heap-use-after-free bug in threaded .xz decoder [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2357251

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-4871b31998' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: perl-Compress-Raw-Lzma
Product: Fedora 40
Version: 2.209
Release: 9.fc40
URL: https://metacpan.org/dist/Compress-Raw-Lzma
Summary: Low-level interface to lzma compression library

Topics%20covered

Topics Covered

security advisory update Fedora perl module heap bug lzma compression

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here