Files
xz/xz-5.8.1.tar.xz
Antonio Teixeira d0eec75432 - Update to 5.8.1:
* Multithreaded .xz decoder (lzma_stream_decoder_mt()):
    - Fix a bug that could at least result in a crash with
      invalid input. (bsc#1240414, CVE-2025-31115)
    - Fix a performance bug: Only one thread was used if the whole
      input file was provided at once to lzma_code(), the output
      buffer was big enough, timeout was disabled, and LZMA_FINISH
      was used. There are no bug reports about this, thus it's
      possible that no real-world application was affected.
  * Avoid <stdalign.h> even with C11/C17 compilers. This fixes the
    build with Oracle Developer Studio 12.6 on Solaris 10 when the
    compiler is in C11 mode (the header doesn't exist).
  * Autotools: Restore compatibility with GNU make versions older
    than 4.0 by creating the package using GNU gettext 0.23.1
    infrastructure instead of 0.24.
  * Update Croatian translation.
- 5.8.0 changelog:
  * liblzma on 32/64-bit x86: When possible, use SSE2 intrinsics
    instead of memcpy() in the LZMA/LZMA2 decoder. In typical cases,
    this may reduce decompression time by 0-5 %. However, when built
    against musl libc, over 15 % time reduction was observed with
    highly compressed files.
  * CMake: Make the feature test macros match the Autotools-based
    build on NetBSD, Darwin, and mingw-w64.
  * Update the Croatian, Italian, Portuguese, and Romanian
    translations.
  * Update the German, Italian, Korean, Romanian, Serbian, and
    Ukrainian man page translations.
- Summary of changes in the 5.7.x development releases:
  * Mark the following LZMA Utils script aliases as deprecated:

OBS-URL: https://build.opensuse.org/package/show/Base:System/xz?expand=0&rev=171
2025-04-08 20:13:26 +00:00

1.4 MiB (Stored with Git LFS)