Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 41: FEDORA-2025-051becf4f2 moderate: perl-Compress-Raw-Lzma heap bug

fedora
Calendar Grey May 10, 2025
Dist Fedora Esm H88
Upgrade Fedora 41 to include perl-Compress-Raw-Lzma to fix heap vulnerability in xz compression algorithm.
xz 5.8.1

Summary

This module provides a Perl interface to the lzma compression library.

It is used by IO::Compress::Lzma.

Update Information:

xz 5.8.1

Topics%20covered

Topics Covered

security advisory fedora software update perl module compression issue heap bug

Change Log

* Thu Apr 3 2025 Richard W.M. Jones - 2.212-6 - Rebuild against xz 5.8.1

References


[ 1 ] Bug #2357253 - CVE-2025-31115 xz: XZ has a heap-use-after-free bug in threaded .xz decoder [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2357253

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-051becf4f2' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: perl-Compress-Raw-Lzma
Product: Fedora 41
Version: 2.212
Release: 6.fc41
URL: https://metacpan.org/dist/Compress-Raw-Lzma
Summary: Low-level interface to lzma compression library

Topics%20covered

Topics Covered

security advisory fedora software update perl module compression issue heap bug

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here