| Release | Version |
|---|---|
| bullseye | 0.5.6-2 |
| bookworm | 0.5.6-2 |
| trixie | 0.5.6-2 |
| forky | 0.5.15-1 |
| sid | 0.5.15-1 |
| Bug | bullseye | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|---|
| CVE-2025-58058 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | xz is a pure golang package for reading and writing xz-compressed file ... |
| Bug | Description |
|---|---|
| CVE-2021-29482 | xz is a compression and decompression library focusing on the xz forma ... |