Bug 386778

Summary: outdated version of liblzma
Product: [Unmaintained] Craft Reporter: uwestoehr <uwestoehr>
Component: CoreAssignee: Hannah von Reth <vonreth>
Status: RESOLVED FIXED    
Severity: normal CC: kde-windows, sdepiets
Priority: NOR    
Version First Reported In: master   
Target Milestone: ---   
Platform: Microsoft Windows   
OS: Microsoft Windows   
Latest Commit: Version Fixed In:
Sentry Crash Report:

Description uwestoehr 2017-11-12 15:18:34 UTC 
On a fresh Craft installation I want to get the KDE framework. While doing this I noticed that the liblzwma is outdated:

*** Action: fetch for win32libs/liblzma ***
wget http://tukaani.org/xz/xz-5.0.5.tar.xz

Looking at
https://tukaani.org/xz/
I see that version 5.0.5 was released 4 years a go and that version 5.2.3 is the current release.

I expect some security issues in old releases so craft should use a newer version.

If this it not a craft bug please tell me that I can report id to the appropriate project.