diff --git a/xz-5.2.10.tar.gz b/xz-5.2.10.tar.gz
new file mode 100644
index 0000000..2035c52
--- /dev/null
+++ b/xz-5.2.10.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:eb7a3b2623c9d0135da70ca12808a214be9c019132baaa61c9e1d198d1d9ded3
+size 2123206
diff --git a/xz-5.2.10.tar.gz.sig b/xz-5.2.10.tar.gz.sig
new file mode 100644
index 0000000..6464915
Binary files /dev/null and b/xz-5.2.10.tar.gz.sig differ
diff --git a/xz-5.2.8.tar.gz b/xz-5.2.8.tar.gz
deleted file mode 100644
index 50c8e7c..0000000
--- a/xz-5.2.8.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ec5cda9f0b91336ab1b881d3d144e8203fcca604e607caca8ae678ddbc29207d
-size 2118089
diff --git a/xz-5.2.8.tar.gz.sig b/xz-5.2.8.tar.gz.sig
deleted file mode 100644
index 68e3b3d..0000000
Binary files a/xz-5.2.8.tar.gz.sig and /dev/null differ
diff --git a/xz.changes b/xz.changes
index a3d8cdc..d08eba1 100644
--- a/xz.changes
+++ b/xz.changes
@@ -1,3 +1,39 @@
+-------------------------------------------------------------------
+Sat Dec 17 17:23:35 UTC 2022 - Dirk Müller <dmueller@suse.com>
+
+- update to 5.2.10:
+    * xz: Don't modify argv[] when parsing the --memlimit* and
+      --block-list command line options. This fixes confusing
+      arguments in process listing (like "ps auxf").
+    * GNU/Linux only: Use __has_attribute(__symver__) to detect if
+      that attribute is supported. This fixes build on Mandriva where
+      Clang is patched to define __GNUC__ to 11 by default (instead
+      of 4 as used by Clang upstream).
+    * liblzma:
+        - Fixed an infinite loop in LZMA encoder initialization
+          if dict_size >= 2 GiB.
+        - Fixed two cases of invalid free() that can happen if
+          a tiny allocation fails in encoder re-initialization
+          or in lzma_filters_update(). These bugs had some
+          similarities with the bug fixed in 5.2.7.
+        - Fixed lzma_block_encoder() not allowing the use of
+          LZMA_SYNC_FLUSH with lzma_code() even though it was
+          documented to be supported. The sync-flush code in
+          the Block encoder was already used internally via
+          lzma_stream_encoder(), so this was just a missing flag
+          in the lzma_block_encoder() API function.
+        - GNU/Linux only: Don't put symbol versions into static
+          liblzma as it breaks things in some cases (and even if
+          it didn't break anything, symbol versions in static
+          libraries are useless anyway). The downside of the fix
+          is that if the configure options --with-pic or --without-pic
+          are used then it's not possible to build both shared and
+          static liblzma at the same time on GNU/Linux anymore;
+          with those options --disable-static or --disable-shared
+          must be used too.
+- drop unused xz-devel-static which is no longer supported when using
+  --with-pic (which is needed for shared libs)
+
 -------------------------------------------------------------------
 Thu Dec  1 09:33:47 UTC 2022 - Jan Engelhardt <jengelh@inai.de>
 
diff --git a/xz.spec b/xz.spec
index cea0de5..013ab77 100644
--- a/xz.spec
+++ b/xz.spec
@@ -19,7 +19,7 @@
 # avoid bootstrapping problem
 %define _binary_payload w9.bzdio
 Name:           xz
-Version:        5.2.8
+Version:        5.2.10
 Release:        0
 Summary:        A Program for Compressing Files with the Lempel–Ziv–Markov algorithm
 License:        GPL-2.0-or-later AND LGPL-2.1-or-later AND SUSE-Public-Domain
@@ -35,7 +35,6 @@ Source5:        xznew.1
 BuildRequires:  pkgconfig
 Provides:       lzma = %{version}
 Obsoletes:      lzma < %{version}
-BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 
 %description
 The xz command is a program for compressing files.
@@ -74,17 +73,6 @@ Obsoletes:      lzma-alpha-devel < %{version}
 This package contains the header files and libraries needed for
 compiling programs using the LZMA library.
 
-%package devel-static
-Summary:        Static version of LZMA library
-License:        SUSE-Public-Domain
-Group:          Development/Libraries/C and C++
-Requires:       lzma-devel = %{version}
-Obsoletes:      xz-static-devel < %{version}-%{release}
-Provides:       xz-static-devel = %{version}-%{release}
-
-%description devel-static
-Static library for the LZMA library
-
 %prep
 %autosetup
 
@@ -94,7 +82,8 @@ export CFLAGS="%{optflags} -D_REENTRANT -pipe -fPIE"
 export LDFLAGS="-Wl,-z,relro,-z,now -pie"
 %configure \
   --with-pic \
-  --docdir=%{_docdir}/%{name}
+  --docdir=%{_docdir}/%{name} \
+  --disable-static
 %if 0%{?do_profiling}
   %make_build CFLAGS="${CFLAGS} %{cflags_profile_generate}"
   %make_build
@@ -184,7 +173,4 @@ rm -vf %{buildroot}%{_docdir}/%{name}/{COPYING,COPYING.GPLv2}
 %{_libdir}/liblzma.so
 %{_libdir}/pkgconfig/liblzma.pc
 
-%files devel-static
-%{_libdir}/liblzma.a
-
 %changelog