Source packages

Links to the tarballs of 5.2.10 and higher versions point to files on GitHub. The other tarball links redirect to files on Sourceforge or are hosted on this site.

5.4.x

5.4.7 (2024-05-29)

xz-5.4.7.tar.gz

2733 KiB

signature

xz-5.4.7.tar.bz2

2116 KiB

signature

xz-5.4.7.tar.xz

1578 KiB

signature

xz-5213-547-562-libtool.patch

signature

5.4.6 (2024-01-26)

xz-5.4.6.tar.gz

2822 KiB

signature from Jia Tan (a malicious actor)[1]

xz-5.4.6.tar.bz2

2131 KiB

signature from Jia Tan (a malicious actor)[1]

xz-5.4.6.tar.zst

1703 KiB

signature from Jia Tan (a malicious actor)[1]

xz-5.4.6.tar.xz

1645 KiB

signature from Jia Tan (a malicious actor)[1]

5.4.5 (2023-11-01)

xz-5.4.5.tar.gz

2817 KiB

signature from Jia Tan (a malicious actor)[1]

xz-5.4.5.tar.bz2

2128 KiB

signature from Jia Tan (a malicious actor)[1]

xz-5.4.5.tar.zst

1700 KiB

signature from Jia Tan (a malicious actor)[1]

xz-5.4.5.tar.xz

1641 KiB

signature from Jia Tan (a malicious actor)[1]

5.4.4 (2023-08-02)

xz-5.4.4.tar.gz[2]

2807 KiB

signature from Jia Tan (a malicious actor)[1]

xz-5.4.4.tar.bz2[2]

2115 KiB

signature from Jia Tan (a malicious actor)[1]

xz-5.4.4.tar.zst[2]

1680 KiB

signature from Jia Tan (a malicious actor)[1]

xz-5.4.4.tar.xz[2]

1623 KiB

signature from Jia Tan (a malicious actor)[1]

5.4.3 (2023-05-04)

xz-5.4.3.tar.gz

2802 KiB

signature from Jia Tan (a malicious actor)[1]

xz-5.4.3.tar.bz2

2112 KiB

signature from Jia Tan (a malicious actor)[1]

xz-5.4.3.tar.zst

1681 KiB

signature from Jia Tan (a malicious actor)[1]

xz-5.4.3.tar.xz

1624 KiB

signature from Jia Tan (a malicious actor)[1]

5.4.2 (2023-03-18)

xz-5.4.2.tar.gz[3]

2733 KiB

signature

xz-5.4.2.tar.bz2[3]

2015 KiB

signature

xz-5.4.2.tar.zst[3]

1629 KiB

signature

xz-5.4.2.tar.xz[3]

1574 KiB

signature

5.4.1 (2023-01-11)

xz-5.4.1.tar.gz

2469 KiB

signature

xz-5.4.1.tar.bz2

1889 KiB

signature

xz-5.4.1.tar.zst

1499 KiB

signature

xz-5.4.1.tar.xz

1450 KiB

signature

5.4.0 (2022-12-13)

xz-5.4.0.tar.gz

2278 KiB

signature

xz-5.4.0.tar.bz2

1819 KiB

signature

xz-5.4.0.tar.zst

1420 KiB

signature

xz-5.4.0.tar.xz

1375 KiB

signature

5.3.x (unstable)

5.3.5beta (2022-12-01)

xz-5.3.5beta.tar.gz

2192 KiB

signature

xz-5.3.5beta.tar.xz

1338 KiB

signature

5.3.4alpha (2022-11-15)

xz-5.3.4alpha.tar.gz

2164 KiB

signature

xz-5.3.4alpha.tar.xz

1319 KiB

signature

5.3.3alpha (2022-08-22)

xz-5.3.3alpha.tar.gz

2069 KiB

signature

xz-5.3.3alpha.tar.xz

1271 KiB

signature

5.3.2alpha (2021-10-28)

xz-5.3.2alpha.tar.gz

1729 KiB

signature

xz-5.3.2alpha.tar.xz

1136 KiB

signature

5.3.1alpha (2018-04-29)

xz-5.3.1alpha.tar.xz

1035 KiB

signature

5.2.x

5.2.13 (2024-05-29)

xz-5.2.13.tar.gz

2064 KiB

signature

xz-5.2.13.tar.bz2

1657 KiB

signature

xz-5.2.13.tar.xz

1260 KiB

signature

xz-5213-547-562-libtool.patch

signature

5.2.12 (2023-05-04)

xz-5.2.12.tar.gz

2139 KiB

signature from Jia Tan (a malicious actor)[1]

xz-5.2.12.tar.bz2

1592 KiB

signature from Jia Tan (a malicious actor)[1]

xz-5.2.12.tar.zst

1317 KiB

signature from Jia Tan (a malicious actor)[1]

xz-5.2.12.tar.xz

1275 KiB

signature from Jia Tan (a malicious actor)[1]

5.2.11 (2023-03-18)

xz-5.2.11.tar.gz[3]

2081 KiB

signature

xz-5.2.11.tar.bz2[3]

1597 KiB

signature

xz-5.2.11.tar.zst[3]

1307 KiB

signature

xz-5.2.11.tar.xz[3]

1266 KiB

signature

5.2.10 (2022-12-13)

xz-5.2.10.tar.gz

2073 KiB

signature

xz-5.2.10.tar.bz2

1604 KiB

signature

xz-5.2.10.tar.zst

1302 KiB

signature

xz-5.2.10.tar.xz

1261 KiB

signature

5.2.9 (2022-11-30)

xz-5.2.9.tar.gz

2073 KiB

signature

xz-5.2.9.tar.bz2

1605 KiB

signature

xz-5.2.9.tar.zst

1302 KiB

signature

xz-5.2.9.tar.xz

1260 KiB

signature

5.2.8 (2022-11-13)

xz-5.2.8.tar.gz

2068 KiB

signature

xz-5.2.8.tar.bz2

1610 KiB

signature

xz-5.2.8.tar.zst

1299 KiB

signature

xz-5.2.8.tar.xz

1257 KiB

signature

5.2.7 (2022-09-30)

xz-5.2.7.tar.gz

2056 KiB

signature

xz-5.2.7.tar.bz2

1615 KiB

signature

xz-5.2.7.tar.zst

1301 KiB

signature

xz-5.2.7.tar.xz

1253 KiB

signature

5.2.6 (2022-08-12)

xz-5.2.6.tar.gz

2021 KiB

signature

xz-5.2.6.tar.bz2

1619 KiB

signature

xz-5.2.6.tar.zst

1272 KiB

signature

xz-5.2.6.tar.xz

1233 KiB

signature

5.2.5 (2020-03-17)

xz-5.2.5.tar.gz

1749 KiB

signature

xz-5.2.5.tar.bz2

1439 KiB

signature

xz-5.2.5.tar.zst

1155 KiB

signature

xz-5.2.5.tar.xz

1122 KiB

signature

5.2.4 (2018-04-29)

xz-5.2.4.tar.gz

1536 KiB

signature

xz-5.2.4.tar.bz2

1258 KiB

signature

xz-5.2.4.tar.xz

1029 KiB

signature

5.2.3 (2016-12-30)

xz-5.2.3.tar.gz

1456 KiB

signature

xz-5.2.3.tar.bz2

1179 KiB

signature

xz-5.2.3.tar.xz

1008 KiB

signature

5.2.2 (2015-09-29)

xz-5.2.2.tar.gz

1430 KiB

signature

xz-5.2.2.tar.bz2

1165 KiB

signature

xz-5.2.2.tar.xz

993 KiB

signature

5.2.1 (2015-02-26)

xz-5.2.1.tar.gz

1420 KiB

signature

xz-5.2.1.tar.bz2

1158 KiB

signature

xz-5.2.1.tar.xz

986 KiB

signature

5.2.0 (2014-12-21)

xz-5.2.0.tar.gz

1412 KiB

signature

xz-5.2.0.tar.bz2

1157 KiB

signature

xz-5.2.0.tar.xz

984 KiB

signature

5.1.x (unstable)

5.1.4beta (2014-09-14)

xz-5.1.4beta.tar.gz

1265 KiB

signature

xz-5.1.4beta.tar.xz

882 KiB

signature

5.1.3alpha (2013-10-26)

xz-5.1.3alpha.tar.gz

1233 KiB

signature

xz-5.1.3alpha.tar.xz

870 KiB

signature

5.1.2alpha (2012-07-04)

xz-5.1.2alpha.tar.xz

919 KiB

signature

5.1.1alpha (2011-04-12)

xz-5.1.1alpha.tar.gz

1241 KiB

signature

xz-5.1.1alpha.tar.xz

891 KiB

signature

5.0.x

5.0.8 (2014-12-21)

xz-5.0.8.tar.gz

1298 KiB

signature

xz-5.0.8.tar.bz2

1059 KiB

signature

xz-5.0.8.tar.xz

922 KiB

signature

5.0.7 (2014-09-20)

xz-5.0.7.tar.gz

1287 KiB

signature

xz-5.0.7.tar.bz2

1049 KiB

signature

xz-5.0.7.tar.xz

917 KiB

signature

5.0.6 (2014-09-14)

xz-5.0.6.tar.gz

1287 KiB

signature

xz-5.0.6.tar.bz2

1050 KiB

signature

xz-5.0.6.tar.xz

917 KiB

signature

5.0.5 (2013-06-30)

xz-5.0.5.tar.gz

1275 KiB

signature

xz-5.0.5.tar.bz2

1036 KiB

signature

xz-5.0.5.tar.xz

907 KiB

signature

5.0.4 (2012-06-22)

xz-5.0.4.tar.gz

1251 KiB

signature

xz-5.0.4.tar.bz2

1024 KiB

signature

xz-5.0.4.tar.xz

894 KiB

signature

5.0.3 (2011-05-21)

xz-5.0.3.tar.gz

1228 KiB

signature

xz-5.0.3.tar.bz2

1002 KiB

signature

xz-5.0.3.tar.xz

880 KiB

signature

5.0.2 (2011-04-01)

xz-5.0.2.tar.gz

1212 KiB

signature

xz-5.0.2.tar.bz2

1000 KiB

signature

xz-5.0.2.tar.xz

872 KiB

signature

5.0.1 (2011-01-29)

xz-5.0.1.tar.gz

1208 KiB

signature

xz-5.0.1.tar.bz2

982 KiB

signature

xz-5.0.1.tar.xz

867 KiB

signature

5.0.0 (2010-10-23)

xz-5.0.0.tar.gz

1203 KiB

signature

xz-5.0.0.tar.bz2

980 KiB

signature

xz-5.0.0.tar.xz

864 KiB

signature

Pre-5.0.0 (unstable)

4.999.9beta (2009-08-27)

xz-4.999.9beta.tar.gz

1013 KiB

xz-4.999.9beta.tar.bz2

829 KiB

xz-4.999.9beta.tar.xz

707 KiB

Binary packages

DOS

xz-5.4.0-dos.zip

276 KiB

signature

xz-5.2.5-dos.zip

254 KiB

signature

xz-5.2.1-dos.zip

222 KiB

signature

xz-5.2.0-dos.zip

222 KiB

signature

xz-5.0.4-dos.zip

214 KiB

signature

xz-5.0.1-dos.zip

199 KiB

signature

xz-5.0.0-dos.zip

199 KiB

signature

The DOS versions of XZ Utils up to and including 5.2.1 include some copylefted code from DJGPP 2.04beta and CWSDPMI r7. The DOS versions of newer XZ Utils include some copylefted code from DJGPP 2.05 and CWSDPMI r7. The relevant source code is available from their home pages, and copies are also available below.

DJGPP 2.05

djlsr205.zip

1999 KiB

djtst205.zip

1061 KiB

DJGPP 2.04beta

djlsr204.zip

1879 KiB

djtst204.zip

963 KiB

CWSDPMI r7

csdpmi7s.zip

88 KiB


1. Jia Tan was a co-maintainer in 2022–2024. He and the team behind him inserted a backdoor (CVE-2024-3094) into XZ Utils 5.6.0 and 5.6.1 releases. He disappeared when this was discovered. The malicious tarballs aren’t available here. The tarballs on this page that were created and signed by Jia Tan have been checked and are safe.
2. XZ Utils 5.4.4: The two newest entries in ChangeLog have different commit IDs than in the v5.4.4 tag in in the v5.4 branch. The reason is explained in the review notes.
3. XZ Utils 5.4.2 and 5.2.11: The v5.4.2 and v5.2.11 tags in the Git repository were signed by Jia Tan but the tarballs were created and signed by Lasse Collin.