Accepting request 1267982 from Base:System

OBS-URL: https://build.opensuse.org/request/show/1267982
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/xz?expand=0&rev=94

xz.changes

@@ -1,3 +1,101 @@
+-------------------------------------------------------------------
+Thu Apr  3 15:43:23 UTC 2025 - Antonio Teixeira <antonio.teixeira@suse.com>
+
+- Update to 5.8.1:
+  * Multithreaded .xz decoder (lzma_stream_decoder_mt()):
+    - Fix a bug that could at least result in a crash with
+      invalid input. (bsc#1240414, CVE-2025-31115)
+    - Fix a performance bug: Only one thread was used if the whole
+      input file was provided at once to lzma_code(), the output
+      buffer was big enough, timeout was disabled, and LZMA_FINISH
+      was used. There are no bug reports about this, thus it's
+      possible that no real-world application was affected.
+  * Avoid <stdalign.h> even with C11/C17 compilers. This fixes the
+    build with Oracle Developer Studio 12.6 on Solaris 10 when the
+    compiler is in C11 mode (the header doesn't exist).
+  * Autotools: Restore compatibility with GNU make versions older
+    than 4.0 by creating the package using GNU gettext 0.23.1
+    infrastructure instead of 0.24.
+  * Update Croatian translation.
+- 5.8.0 changelog:
+  * liblzma on 32/64-bit x86: When possible, use SSE2 intrinsics
+    instead of memcpy() in the LZMA/LZMA2 decoder. In typical cases,
+    this may reduce decompression time by 0-5 %. However, when built
+    against musl libc, over 15 % time reduction was observed with
+    highly compressed files.
+  * CMake: Make the feature test macros match the Autotools-based
+    build on NetBSD, Darwin, and mingw-w64.
+  * Update the Croatian, Italian, Portuguese, and Romanian
+    translations.
+  * Update the German, Italian, Korean, Romanian, Serbian, and
+    Ukrainian man page translations.
+- Summary of changes in the 5.7.x development releases:
+  * Mark the following LZMA Utils script aliases as deprecated:
+    lzcmp, lzdiff, lzless, lzmore, lzgrep, lzegrep, and lzfgrep.
+  * liblzma:
+    - Improve LZMA/LZMA2 encoder speed on 64-bit PowerPC (both
+      endiannesses) and those 64-bit RISC-V processors that
+      support fast unaligned access.
+    - Add low-level APIs for RISC-V, ARM64, and x86 BCJ filters
+      to lzma/bcj.h. These are primarily for erofs-utils.
+    - x86/x86-64/E2K CLMUL CRC code was rewritten.
+    - Use the CRC32 instructions on LoongArch.
+  * xz:
+    - Synchronize the output file and its directory using fsync()
+      before deleting the input file. No syncing is done when xz
+      isn't going to delete the input file.
+    - Add --no-sync to disable the sync-before-delete behavior.
+    - Make --single-stream imply --keep.
+  * xz, xzdec, lzmainfo: When printing messages, replace
+    non-printable characters with question marks.
+  * xz and xzdec on Linux: Support Landlock ABI versions 5 and 6.
+  * CMake: Revise the configuration variables and some of their
+    options, and document them in the file INSTALL. CMake support
+    is no longer experimental. (It was already not experimental
+    when building for native Windows.)
+  * Add build-aux/license-check.sh.
+
+-------------------------------------------------------------------
+Sun Feb  2 08:59:56 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- update to 5.6.4:
+  * liblzma: Fix LZMA/LZMA2 encoder on big endian ARM64.
+  * xz: Fix --filters= and --filters1= ... --filters9= options
+    parsing. They require an argument, thus "xz --filters lzma2"
+    should work in addition to "xz --filters=lzma2".
+  * Updates to documentation, translations, build system files
+- package license files in all packages
+
+-------------------------------------------------------------------
+Mon Oct  7 11:48:07 UTC 2024 - Antonio Teixeira <antonio.teixeira@suse.com>
+
+- Update to 5.6.3:
+  * liblzma:
+    - Fix x86-64 inline assembly compatibility with GNU Binutils
+      older than 2.27.
+    - Fix the build with GCC 4.2 on OpenBSD/sparc64.
+  * xzdec: Display an error instead of failing silently if the
+    unsupported option -M is specified.
+  * lzmainfo: Fix integer overflows when rounding the dictionary and
+    uncompressed sizes to the nearest mebibyte.
+  * Autotools-based build:
+    - Fix feature checks with link-time optimization (-flto).
+    - Solaris: Fix a compatibility issue in version.sh. It matters
+      if one wants to regenerate configure by running autoconf.
+  * CMake:
+    - Use paths relative to ${prefix} in liblzma.pc when possible.
+      This is done only with CMake >= 3.20.
+    - Prefer a C11 compiler over a C99 compiler but accept both.
+    - Link Threads::Threads against liblzma using PRIVATE so that
+      -pthread and such flags won't unnecessarily get included in
+      the usage requirements of shared liblzma. That is,
+      target_link_libraries(foo PRIVATE liblzma::liblzma) no
+      longer adds -pthread if using POSIX threads and linking
+      against shared liblzma. The threading flags are still added
+      if linking against static liblzma.
+  * Updated translations: Catalan, Chinese (simplified), and
+    Brazilian Portuguese.
+
 -------------------------------------------------------------------
 Thu May 30 06:08:18 UTC 2024 - Paolo Stivanin <info@paolostivanin.com>
 

xz.keyring

@@ -13,18 +13,18 @@ CduUwSKv+6RmtWI5ZmTQYOcBRcZyGKml9X9Q8iSbm6cnpFXmLrNQwCJN+D3SiYGc
 MtbltZo0ysPMa6Xj5xFaYqWk/BI4iLb2Gs+ByGo/+a0Eq4XYBMOpitNniQARAQAB
 tCdMYXNzZSBDb2xsaW4gPGxhc3NlLmNvbGxpbkB0dWthYW5pLm9yZz6JAlEEEwEK
 ADsCGwMCHgECF4AECwkIBwMVCggFFgIDAQAWIQQ2kMJAzlG0Zw0wrRw47nV9aRhG
-IAUCZZwJyQUJGuHiNwAKCRA47nV9aRhGIE4qD/4jdFTe3WPpLgvz/jdlbnSZxr7q
-OS6H/ZJFENHO4SbavXdoXLtj+t6/lqWq890Js8IpWaaiJLowzW1xJMEg99W6k0KD
-3pHUbwPxf0GCSAt/W4JYxdTj+1ggdHjx5yBAmOakjnOH+ZDKQNBnDOI6ghf3ew+H
-9z/b0mQX3rlQbtoqSPZtuDOdFcjCOSwEyqdV+9eNqnv2CoKZkiGoUB1WGCbqKUkY
-KiUJ3WldmPQ5RQYjEi7zZWVac1VuwBA0XOku+W4cCJ5DnPyK7CtMwC84VvaodlOX
-UAK3Y5BIZpZM2Rk6yMX5lFDA5nA8UuHJQRDjTVmh3BIdgRvp0ZV6ogtqNE7RifpW
-aBWDIsCkimcbCJJM+edOLiVZog+ia1Ts8zu33wj7Tnvp5znLc8NLZIqwu1HKLS97
-m+Yf5oC3ObTZtXbVF+OglWe/3ljLHdL2bJxNdtcVlChSNPUW3fgLHk9Fzrlnqdab
-tSGwI/0Ryt00cKjRiMOagTn5Nly6boCtgGYdQafQoSrs3eQjnWVgbNYDMgPyl4k+
-Q5RJLEY7AvtXo7FUEgOTfr9PWmjmc2JzGpxbtwl6sQi6yLrBZTRf1Xao2OjOje6G
-XdUbXNmgOv16sWxcI0s4lX1z28BgHQfwXhBFBRjw2Sy+6TfFXjX24thcpMwvyJ3c
-xhMtdY4N4jyfRjYe8LkCDQRMxDmSARAAv8XAp2PGA/G1KmCrVIzOBm1NPIuqGAYP
+IAUCZ364UgUJHMSQwAAKCRA47nV9aRhGIH6dD/46yxNWPrEQlVFd2XbOfBdYjVSh
+SOtnF/7nfdpxObjsy5eqsuNGGknkfJkqDvYXcvtVLwn+U3WEscCX3eZ/syM+bpMj
++rMUfczDR21z6UEG9nfR5Yx+7TOpPfXylr2W1OfAtjdMv5UxYKpmmaQogVH+EeA0
+zAE0gZ+n1h0CzAXjmSeNOmAhaMcR1kkA7jM4ZW3r7ovcUuHSR6XwYl2gCDRkHaFR
+WePNaOUXRHn/WQFQusUZ8FgZdidw3j4U13ajpoQdZonXk9lBrxu3nS2EzaTuPsEf
+R9f1xRlWn733sTAJ5jCOpDFWvmLMNowodC5FYd3SKIn6K80uPamcVnPrtcfGZXAI
+OgELAmbrDRz3uDfK1sty4pqI7We/0l0poqf0i863piA0a+awOMURTo9B/vjJvdh1
+Rf672fVWfnWRfAnjgIifCN4nBPVKRcY9XgmOG8ZqQgpOug7EERz4W8IZccjxx4gu
+jTMXoPUY1s+6c/CJlQ3gESlfPkz1UYKCFjEvApMOD99SG8AUJvQbGvPFkIK5euWS
+hOVLAmLKI3YNGCXUiPA4i9AEYnkDtAydohUKU/WclBWHWaeAZDccDivs8dPiF3Dd
+YrR0eb81lB36Jm13cJodBS4aArHvgDeDvz7aLr7An0qXmNTnpc3cdU1ovskNXmA2
+Yj+I0ojpJsh6ici6dLkCDQRMxDmSARAAv8XAp2PGA/G1KmCrVIzOBm1NPIuqGAYP
 c1l9p0dYdhEgvfw0NXcl5MDv1jbOPZ2PspA8NP7Rqp6LNNXYTeM/eIJDndU5Phyi
 ewFpACAp7Gmm2dL5PUOhu0gIUnQYbN/QdGPoo7bNI646K1Y9aVTBu9fszQssjb6G
 qXHSNM+pskVn9lropO1tLrF0I9VSlSphlCmiQRlzBCZSnxD6UagkPaw1gJnJqnrd
@@ -36,17 +36,17 @@ CjdACbWJsPEoIOrRFxY+NwJEA39Dkyalyh2l0qTNXTIYhLiDuzl+tWuBX+SjHavj
 9jGyvwr3T37gfzYCNMoZf8GaxAUJMCoGTqnsjTPGMion/DfdNkFDQ+fivdYiVQ9p
 /Njpr38sC83V8dHF/1KkIHImyzMPTdC7l/lMHyC2Gx2dWZOjuOOKit0Qoy3DZoQw
 vN1ZZND9M1UAEQEAAYkCPAQYAQoAJgIbDBYhBDaQwkDOUbRnDTCtHDjudX1pGEYg
-BQJlnAmyBQka4eIgAAoJEDjudX1pGEYguyYQAJo+5SnMMdu+d70mWfUb9PZg7P5C
-GRepHnckx9Sis5oR5s7NNl5j5Yy4J1UwsmrP+mn52ujqewkkVsCq65NGQQx7+tkw
-uKGvnGBkHdrI+aJk86qLMf4DlnNJEmN8t5jTGQfRLbFVf2I8EY6qXAzCSmL9Zs++
-rDUz65GOTB1EP0XmBRsuVYRfDbFezrPQH0JDucbXFi/2BDnl2/Mk9NBoQ0CvB4oG
-tLDiQZ+jV7n1VXXJ1faD9s7i0hOTdcG6rlyIqi/LyAzdCnOYTkmv3U1kdmzkvrh1
-KEiejnM5fj27RE2v191vh3hgZ+X5+uwjNTP0QC4qP8XykQOAA8usOMVZ72lyXCAk
-wiUcRdrAXLN/XbIFNcQ3m4d3W6t60Gk09wFlUKaEltDMlPUsxiSG3qFwFGPBP6UV
-h3mjJMAl1jltLrR7ybez0SczfrcAtdCsKTvgzV9W2TzUfK2R9PBanmXTXK2M7yU3
-IquHt3Je4aSP7XYb5D+ajlbFNvnXOYcai8WryfC5nLAfV4MbPX+UlRaYCqqHVhut
-gK93re1L5mMI3zjG5Ri5jLpUA9toSJCIJIY5zwr/8LL/ZL4TixXlouA17yjkpY/e
-Bjs8cNj1O3aM4jY2FKCS8UbfxOiARk/5kBMRPEZ/mqpMQttzE8KVjOv6fRxy/eVE
-888/gToe5kb8qYwy
-=6rZC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+=m5Nx
 -----END PGP PUBLIC KEY BLOCK-----

xz.spec

@@ -1,7 +1,8 @@
 #
 # spec file for package xz
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2025 Andreas Stieger <Andreas.Stieger@gmx.de>
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -22,9 +23,8 @@
 %else
 %bcond_with static
 %endif
-
 Name:           xz
-Version:        5.6.2
+Version:        5.8.1
 Release:        0
 Summary:        A Program for Compressing Files with the Lempel–Ziv–Markov algorithm
 License:        0BSD AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later
@@ -54,7 +54,6 @@ The xz command is a program for compressing files.
   decompressing speed.
 * Very similar command line interface to what gzip and bzip2 have.
 
-
 %lang_package
 
 %package -n liblzma5
@@ -135,8 +134,7 @@ install -Dpm 0644 liblzma.a %{buildroot}%{_libdir}/
 %endif
 rm -vf %{buildroot}%{_docdir}/%{name}/{COPYING,COPYING.GPLv2}
 
-%post -n liblzma5 -p /sbin/ldconfig
-%postun -n liblzma5 -p /sbin/ldconfig
+%ldconfig_scriptlets -n liblzma5
 
 %files
 %license COPYING COPYING.GPLv2
@@ -191,6 +189,7 @@ rm -vf %{buildroot}%{_docdir}/%{name}/{COPYING,COPYING.GPLv2}
 %{_mandir}/man1/xznew.1%{?ext_man}
 
 %files lang -f %{name}.lang
+%license COPYING COPYING.GPLv2
 %dir %{_mandir}/fr
 %dir %{_mandir}/de
 %dir %{_mandir}/ko
@@ -200,9 +199,11 @@ rm -vf %{buildroot}%{_docdir}/%{name}/{COPYING,COPYING.GPLv2}
 %endif
 
 %files -n liblzma5
+%license COPYING COPYING.GPLv2
 %{_libdir}/liblzma.so.5*
 
 %files devel
+%license COPYING COPYING.GPLv2
 %{_includedir}/lzma.h
 %dir %{_includedir}/lzma/
 %{_includedir}/lzma/*
@@ -211,7 +212,7 @@ rm -vf %{buildroot}%{_docdir}/%{name}/{COPYING,COPYING.GPLv2}
 
 %if %{with static}
 %files static-devel
-%defattr(-, root, root)
+%license COPYING COPYING.GPLv2
 %{_libdir}/liblzma.a
 %endif