diff --git a/xz-5.6.2.tar.xz b/xz-5.6.2.tar.xz deleted file mode 100644 index 3d06995..0000000 --- a/xz-5.6.2.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:a9db3bb3d64e248a0fae963f8fb6ba851a26ba1822e504dc0efd18a80c626caf -size 1307448 diff --git a/xz-5.6.2.tar.xz.sig b/xz-5.6.2.tar.xz.sig deleted file mode 100644 index 93d8424..0000000 Binary files a/xz-5.6.2.tar.xz.sig and /dev/null differ diff --git a/xz-5.8.1.tar.xz b/xz-5.8.1.tar.xz new file mode 100644 index 0000000..cc375f4 --- /dev/null +++ b/xz-5.8.1.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:0b54f79df85912504de0b14aec7971e3f964491af1812d83447005807513cd9e +size 1461872 diff --git a/xz-5.8.1.tar.xz.sig b/xz-5.8.1.tar.xz.sig new file mode 100644 index 0000000..73feda5 Binary files /dev/null and b/xz-5.8.1.tar.xz.sig differ diff --git a/xz.changes b/xz.changes index f59d27a..f9f4ae3 100644 --- a/xz.changes +++ b/xz.changes @@ -1,3 +1,101 @@ +------------------------------------------------------------------- +Thu Apr 3 15:43:23 UTC 2025 - Antonio Teixeira + +- Update to 5.8.1: + * Multithreaded .xz decoder (lzma_stream_decoder_mt()): + - Fix a bug that could at least result in a crash with + invalid input. (bsc#1240414, CVE-2025-31115) + - Fix a performance bug: Only one thread was used if the whole + input file was provided at once to lzma_code(), the output + buffer was big enough, timeout was disabled, and LZMA_FINISH + was used. There are no bug reports about this, thus it's + possible that no real-world application was affected. + * Avoid even with C11/C17 compilers. This fixes the + build with Oracle Developer Studio 12.6 on Solaris 10 when the + compiler is in C11 mode (the header doesn't exist). + * Autotools: Restore compatibility with GNU make versions older + than 4.0 by creating the package using GNU gettext 0.23.1 + infrastructure instead of 0.24. + * Update Croatian translation. +- 5.8.0 changelog: + * liblzma on 32/64-bit x86: When possible, use SSE2 intrinsics + instead of memcpy() in the LZMA/LZMA2 decoder. In typical cases, + this may reduce decompression time by 0-5 %. However, when built + against musl libc, over 15 % time reduction was observed with + highly compressed files. + * CMake: Make the feature test macros match the Autotools-based + build on NetBSD, Darwin, and mingw-w64. + * Update the Croatian, Italian, Portuguese, and Romanian + translations. + * Update the German, Italian, Korean, Romanian, Serbian, and + Ukrainian man page translations. +- Summary of changes in the 5.7.x development releases: + * Mark the following LZMA Utils script aliases as deprecated: + lzcmp, lzdiff, lzless, lzmore, lzgrep, lzegrep, and lzfgrep. + * liblzma: + - Improve LZMA/LZMA2 encoder speed on 64-bit PowerPC (both + endiannesses) and those 64-bit RISC-V processors that + support fast unaligned access. + - Add low-level APIs for RISC-V, ARM64, and x86 BCJ filters + to lzma/bcj.h. These are primarily for erofs-utils. + - x86/x86-64/E2K CLMUL CRC code was rewritten. + - Use the CRC32 instructions on LoongArch. + * xz: + - Synchronize the output file and its directory using fsync() + before deleting the input file. No syncing is done when xz + isn't going to delete the input file. + - Add --no-sync to disable the sync-before-delete behavior. + - Make --single-stream imply --keep. + * xz, xzdec, lzmainfo: When printing messages, replace + non-printable characters with question marks. + * xz and xzdec on Linux: Support Landlock ABI versions 5 and 6. + * CMake: Revise the configuration variables and some of their + options, and document them in the file INSTALL. CMake support + is no longer experimental. (It was already not experimental + when building for native Windows.) + * Add build-aux/license-check.sh. + +------------------------------------------------------------------- +Sun Feb 2 08:59:56 UTC 2025 - Andreas Stieger + +- update to 5.6.4: + * liblzma: Fix LZMA/LZMA2 encoder on big endian ARM64. + * xz: Fix --filters= and --filters1= ... --filters9= options + parsing. They require an argument, thus "xz --filters lzma2" + should work in addition to "xz --filters=lzma2". + * Updates to documentation, translations, build system files +- package license files in all packages + +------------------------------------------------------------------- +Mon Oct 7 11:48:07 UTC 2024 - Antonio Teixeira + +- Update to 5.6.3: + * liblzma: + - Fix x86-64 inline assembly compatibility with GNU Binutils + older than 2.27. + - Fix the build with GCC 4.2 on OpenBSD/sparc64. + * xzdec: Display an error instead of failing silently if the + unsupported option -M is specified. + * lzmainfo: Fix integer overflows when rounding the dictionary and + uncompressed sizes to the nearest mebibyte. + * Autotools-based build: + - Fix feature checks with link-time optimization (-flto). + - Solaris: Fix a compatibility issue in version.sh. It matters + if one wants to regenerate configure by running autoconf. + * CMake: + - Use paths relative to ${prefix} in liblzma.pc when possible. + This is done only with CMake >= 3.20. + - Prefer a C11 compiler over a C99 compiler but accept both. + - Link Threads::Threads against liblzma using PRIVATE so that + -pthread and such flags won't unnecessarily get included in + the usage requirements of shared liblzma. That is, + target_link_libraries(foo PRIVATE liblzma::liblzma) no + longer adds -pthread if using POSIX threads and linking + against shared liblzma. The threading flags are still added + if linking against static liblzma. + * Updated translations: Catalan, Chinese (simplified), and + Brazilian Portuguese. + ------------------------------------------------------------------- Thu May 30 06:08:18 UTC 2024 - Paolo Stivanin diff --git a/xz.keyring b/xz.keyring index c62c840..803aa33 100644 --- a/xz.keyring +++ b/xz.keyring @@ -13,18 +13,18 @@ CduUwSKv+6RmtWI5ZmTQYOcBRcZyGKml9X9Q8iSbm6cnpFXmLrNQwCJN+D3SiYGc MtbltZo0ysPMa6Xj5xFaYqWk/BI4iLb2Gs+ByGo/+a0Eq4XYBMOpitNniQARAQAB tCdMYXNzZSBDb2xsaW4gPGxhc3NlLmNvbGxpbkB0dWthYW5pLm9yZz6JAlEEEwEK ADsCGwMCHgECF4AECwkIBwMVCggFFgIDAQAWIQQ2kMJAzlG0Zw0wrRw47nV9aRhG -IAUCZZwJyQUJGuHiNwAKCRA47nV9aRhGIE4qD/4jdFTe3WPpLgvz/jdlbnSZxr7q -OS6H/ZJFENHO4SbavXdoXLtj+t6/lqWq890Js8IpWaaiJLowzW1xJMEg99W6k0KD -3pHUbwPxf0GCSAt/W4JYxdTj+1ggdHjx5yBAmOakjnOH+ZDKQNBnDOI6ghf3ew+H -9z/b0mQX3rlQbtoqSPZtuDOdFcjCOSwEyqdV+9eNqnv2CoKZkiGoUB1WGCbqKUkY -KiUJ3WldmPQ5RQYjEi7zZWVac1VuwBA0XOku+W4cCJ5DnPyK7CtMwC84VvaodlOX -UAK3Y5BIZpZM2Rk6yMX5lFDA5nA8UuHJQRDjTVmh3BIdgRvp0ZV6ogtqNE7RifpW -aBWDIsCkimcbCJJM+edOLiVZog+ia1Ts8zu33wj7Tnvp5znLc8NLZIqwu1HKLS97 -m+Yf5oC3ObTZtXbVF+OglWe/3ljLHdL2bJxNdtcVlChSNPUW3fgLHk9Fzrlnqdab -tSGwI/0Ryt00cKjRiMOagTn5Nly6boCtgGYdQafQoSrs3eQjnWVgbNYDMgPyl4k+ -Q5RJLEY7AvtXo7FUEgOTfr9PWmjmc2JzGpxbtwl6sQi6yLrBZTRf1Xao2OjOje6G -XdUbXNmgOv16sWxcI0s4lX1z28BgHQfwXhBFBRjw2Sy+6TfFXjX24thcpMwvyJ3c -xhMtdY4N4jyfRjYe8LkCDQRMxDmSARAAv8XAp2PGA/G1KmCrVIzOBm1NPIuqGAYP +IAUCZ364UgUJHMSQwAAKCRA47nV9aRhGIH6dD/46yxNWPrEQlVFd2XbOfBdYjVSh +SOtnF/7nfdpxObjsy5eqsuNGGknkfJkqDvYXcvtVLwn+U3WEscCX3eZ/syM+bpMj ++rMUfczDR21z6UEG9nfR5Yx+7TOpPfXylr2W1OfAtjdMv5UxYKpmmaQogVH+EeA0 +zAE0gZ+n1h0CzAXjmSeNOmAhaMcR1kkA7jM4ZW3r7ovcUuHSR6XwYl2gCDRkHaFR +WePNaOUXRHn/WQFQusUZ8FgZdidw3j4U13ajpoQdZonXk9lBrxu3nS2EzaTuPsEf +R9f1xRlWn733sTAJ5jCOpDFWvmLMNowodC5FYd3SKIn6K80uPamcVnPrtcfGZXAI +OgELAmbrDRz3uDfK1sty4pqI7We/0l0poqf0i863piA0a+awOMURTo9B/vjJvdh1 +Rf672fVWfnWRfAnjgIifCN4nBPVKRcY9XgmOG8ZqQgpOug7EERz4W8IZccjxx4gu +jTMXoPUY1s+6c/CJlQ3gESlfPkz1UYKCFjEvApMOD99SG8AUJvQbGvPFkIK5euWS +hOVLAmLKI3YNGCXUiPA4i9AEYnkDtAydohUKU/WclBWHWaeAZDccDivs8dPiF3Dd +YrR0eb81lB36Jm13cJodBS4aArHvgDeDvz7aLr7An0qXmNTnpc3cdU1ovskNXmA2 +Yj+I0ojpJsh6ici6dLkCDQRMxDmSARAAv8XAp2PGA/G1KmCrVIzOBm1NPIuqGAYP c1l9p0dYdhEgvfw0NXcl5MDv1jbOPZ2PspA8NP7Rqp6LNNXYTeM/eIJDndU5Phyi ewFpACAp7Gmm2dL5PUOhu0gIUnQYbN/QdGPoo7bNI646K1Y9aVTBu9fszQssjb6G qXHSNM+pskVn9lropO1tLrF0I9VSlSphlCmiQRlzBCZSnxD6UagkPaw1gJnJqnrd @@ -36,17 +36,17 @@ CjdACbWJsPEoIOrRFxY+NwJEA39Dkyalyh2l0qTNXTIYhLiDuzl+tWuBX+SjHavj 9jGyvwr3T37gfzYCNMoZf8GaxAUJMCoGTqnsjTPGMion/DfdNkFDQ+fivdYiVQ9p /Njpr38sC83V8dHF/1KkIHImyzMPTdC7l/lMHyC2Gx2dWZOjuOOKit0Qoy3DZoQw vN1ZZND9M1UAEQEAAYkCPAQYAQoAJgIbDBYhBDaQwkDOUbRnDTCtHDjudX1pGEYg -BQJlnAmyBQka4eIgAAoJEDjudX1pGEYguyYQAJo+5SnMMdu+d70mWfUb9PZg7P5C -GRepHnckx9Sis5oR5s7NNl5j5Yy4J1UwsmrP+mn52ujqewkkVsCq65NGQQx7+tkw -uKGvnGBkHdrI+aJk86qLMf4DlnNJEmN8t5jTGQfRLbFVf2I8EY6qXAzCSmL9Zs++ -rDUz65GOTB1EP0XmBRsuVYRfDbFezrPQH0JDucbXFi/2BDnl2/Mk9NBoQ0CvB4oG -tLDiQZ+jV7n1VXXJ1faD9s7i0hOTdcG6rlyIqi/LyAzdCnOYTkmv3U1kdmzkvrh1 -KEiejnM5fj27RE2v191vh3hgZ+X5+uwjNTP0QC4qP8XykQOAA8usOMVZ72lyXCAk -wiUcRdrAXLN/XbIFNcQ3m4d3W6t60Gk09wFlUKaEltDMlPUsxiSG3qFwFGPBP6UV -h3mjJMAl1jltLrR7ybez0SczfrcAtdCsKTvgzV9W2TzUfK2R9PBanmXTXK2M7yU3 -IquHt3Je4aSP7XYb5D+ajlbFNvnXOYcai8WryfC5nLAfV4MbPX+UlRaYCqqHVhut -gK93re1L5mMI3zjG5Ri5jLpUA9toSJCIJIY5zwr/8LL/ZL4TixXlouA17yjkpY/e -Bjs8cNj1O3aM4jY2FKCS8UbfxOiARk/5kBMRPEZ/mqpMQttzE8KVjOv6fRxy/eVE -888/gToe5kb8qYwy -=6rZC +BQJnfrhHBQkcxJC1AAoJEDjudX1pGEYgjaIQAIxs2u0oNqKiFK58d/lpSg+sWgwO +3WG9cChhQvPnJdyAdXKlnw8/SSykqtuMv1/N29mYSO7K3sCISvoCTR2KqT546o+C +2/CqSs3WEuX1SpPQGVPULiTxLLsZh0WhJrKchmV3NRACPxoueiqtFosJPA6u1sf2 +ilN89ArGxzteIuTpyUy5r98GHUK5svjVh4sz+KvTNlGFHN3nAoR7BhiDf6RgQ0Q3 +ukkGJqvtYSUV3RuVkgR+7FHDFsb6RRmykcm+YStz3P0YTMJjbLYewaQLzKZnLWnS +N18NRrITwEUicBXkcOFjF18d7jXYsAzzX7l28LFi5ygWuOOvT5s7EzTmWty5+qre +HHnjL4SCQY2rkb9AipUTqpoDhBz91QivTdQ/EsJlP6e08hwaa7heZqZWWy1eRr8R +EzD2r3GfQ2EegPkwsidivDBlK4PgWnlEl06RbE1dXoamXfPJ1q0SFlkw3zMW+bqY +P1jTxrJVAlXFf8qT3d5pXz871R1NPP/dyPJni844Bi42q8JHIZaKWZ6QQsP20TGM +BrvbI8qMCM1gH58vcBWBHtpm2kGEjVdJyl75RgjCf1VHqPab6A0/+tABGlLf5rm9 +kxOmb2wDCW8xPno/A8psVWcYE7gERT6Bdqbkr3SZw92izGCA4m17O1MPf6vj/ngb +RROvuEI11HLOmBJv +=m5Nx -----END PGP PUBLIC KEY BLOCK----- diff --git a/xz.spec b/xz.spec index 46d87ef..29d0640 100644 --- a/xz.spec +++ b/xz.spec @@ -1,7 +1,8 @@ # # spec file for package xz # -# Copyright (c) 2024 SUSE LLC +# Copyright (c) 2025 SUSE LLC +# Copyright (c) 2025 Andreas Stieger # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -22,9 +23,8 @@ %else %bcond_with static %endif - Name: xz -Version: 5.6.2 +Version: 5.8.1 Release: 0 Summary: A Program for Compressing Files with the Lempel–Ziv–Markov algorithm License: 0BSD AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later @@ -54,7 +54,6 @@ The xz command is a program for compressing files. decompressing speed. * Very similar command line interface to what gzip and bzip2 have. - %lang_package %package -n liblzma5 @@ -135,8 +134,7 @@ install -Dpm 0644 liblzma.a %{buildroot}%{_libdir}/ %endif rm -vf %{buildroot}%{_docdir}/%{name}/{COPYING,COPYING.GPLv2} -%post -n liblzma5 -p /sbin/ldconfig -%postun -n liblzma5 -p /sbin/ldconfig +%ldconfig_scriptlets -n liblzma5 %files %license COPYING COPYING.GPLv2 @@ -191,6 +189,7 @@ rm -vf %{buildroot}%{_docdir}/%{name}/{COPYING,COPYING.GPLv2} %{_mandir}/man1/xznew.1%{?ext_man} %files lang -f %{name}.lang +%license COPYING COPYING.GPLv2 %dir %{_mandir}/fr %dir %{_mandir}/de %dir %{_mandir}/ko @@ -200,9 +199,11 @@ rm -vf %{buildroot}%{_docdir}/%{name}/{COPYING,COPYING.GPLv2} %endif %files -n liblzma5 +%license COPYING COPYING.GPLv2 %{_libdir}/liblzma.so.5* %files devel +%license COPYING COPYING.GPLv2 %{_includedir}/lzma.h %dir %{_includedir}/lzma/ %{_includedir}/lzma/* @@ -211,7 +212,7 @@ rm -vf %{buildroot}%{_docdir}/%{name}/{COPYING,COPYING.GPLv2} %if %{with static} %files static-devel -%defattr(-, root, root) +%license COPYING COPYING.GPLv2 %{_libdir}/liblzma.a %endif