diff --git a/changelogs/unreleased/300-upgrade-lzma-to-5-2-4.yml b/changelogs/unreleased/300-upgrade-lzma-to-5-2-4.yml
new file mode 100644
index 0000000000000000000000000000000000000000..961a547138abc556eb257306cb3ae52694f36964_Y2hhbmdlbG9ncy91bnJlbGVhc2VkLzMwMC11cGdyYWRlLWx6bWEtdG8tNS0yLTQueW1s
--- /dev/null
+++ b/changelogs/unreleased/300-upgrade-lzma-to-5-2-4.yml
@@ -0,0 +1,5 @@
+---
+title: Update liblzma to 5.2.4
+merge_request: 3197
+author:
+type: other
diff --git a/config/software/liblzma.rb b/config/software/liblzma.rb
index 6e74cfe45c03b0407f333c19e9a079c164eed1b4_Y29uZmlnL3NvZnR3YXJlL2xpYmx6bWEucmI=..961a547138abc556eb257306cb3ae52694f36964_Y29uZmlnL3NvZnR3YXJlL2xpYmx6bWEucmI= 100644
--- a/config/software/liblzma.rb
+++ b/config/software/liblzma.rb
@@ -15,7 +15,7 @@
 #
 
 name 'liblzma'
-default_version '5.2.2'
+default_version '5.2.4'
 
 license 'Public-Domain'
 license_file 'COPYING'
@@ -23,7 +23,7 @@
 skip_transitive_dependency_licensing true
 
 source url: "http://tukaani.org/xz/xz-#{version}.tar.gz",
-       md5: '7cf6a8544a7dae8e8106fdf7addfa28c'
+       sha256: 'b512f3b726d3b37b6dc4c8570e137b9311e7552e8ccbab4d39d47ce5f4177145'
 
 relative_path "xz-#{version}"