From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Mon, 14 Sep 2026 17:01:30 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1x68BW-0026Dz-0l for lore@lore.pengutronix.de; Mon, 14 Sep 2026 17:01:30 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1x68BV-0000P8-4T; Mon, 14 Sep 2026 17:01:29 +0200 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1x68BH-0000Or-8i for ptxdist@pengutronix.de; Mon, 14 Sep 2026 17:01:15 +0200 Authentication-Results: mx1.white.stw.pengutronix.de; dkim=pass header.d=thorsis.com header.s=dkim header.b=JlV43BX8; spf=pass (mx1.white.stw.pengutronix.de: domain of ada@thorsis.com designates 217.92.40.78 as permitted sender) smtp.mailfrom=ada@thorsis.com; dmarc=pass (policy=quarantine) header.from=thorsis.com Received: from mail.thorsis.com (mail.thorsis.com [217.92.40.78]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id B9BFB20288B; Mon, 14 Sep 2026 17:01:07 +0200 (CEST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id 7E4F81487D28; Mon, 14 Sep 2026 17:01:02 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thorsis.com; s=dkim; t=1789398066; h=from:subject:date:message-id:to:cc:mime-version: content-transfer-encoding; bh=rrtOiNxaX62G2gxQ5qREfFCCtdWlKpCR67XOk6HdFNI=; b=JlV43BX8BuwdZ3/YO9uhML74CFadHkVhR3xnASIMV+x8frCyLaQ1hASRH0RuIfeFTxv1ju E3bxeLTW3FXLt/3ABBR6QnxaZM0wt4wUePQGDxh1t2TkEKMRKQV4QouVM5952+sjLw4UTn niPee6Q3Wfpulyjn1kE83O9sRGJuKOWHgXL4eOrbk4pVwLSC8eYjl/IhcST4uz43y3Ig0g 3+bFvQfbihPhePoeASfx2cBPms7NgCPBaLYLr9qmR8EJM7qODzvIn2vGLSN5VCP6tp8iRU nB8gf3v7TB3wfZsfgWBg5cAkQJO+/5azGVUbKGsmEQSsmf81CVXuymS1E+vUmg== To: ptxdist@pengutronix.de Date: Mon, 14 Sep 2026 17:00:55 +0200 Message-ID: <20260914150055.317620-1-ada@thorsis.com> X-Mailer: git-send-email 2.47.3 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Last-TLS-Session-Version: TLSv1.3 X-Rspamd-Server: mx1 X-Stat-Signature: yers7pajz9arefska73538fc5y9efq98 X-Rspamd-Queue-Id: B9BFB20288B X-Spamd-Result: default: False [-2.50 / 15.00]; BAYES_HAM(-3.00)[100.00%]; MID_CONTAINS_FROM(1.00)[]; DMARC_POLICY_ALLOW(-0.50)[thorsis.com,quarantine]; R_MISSING_CHARSET(0.50)[]; R_SPF_ALLOW(-0.20)[+mx:c]; R_DKIM_ALLOW(-0.20)[thorsis.com:s=dkim]; MIME_GOOD(-0.10)[text/plain]; MIME_TRACE(0.00)[0:+]; RECEIVED_HELO_LOCALHOST(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; ARC_NA(0.00)[]; RCPT_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]; DKIM_TRACE(0.00)[thorsis.com:+]; NEURAL_HAM(-0.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; TO_DN_SOME(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCVD_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:3320, ipnet:217.80.0.0/12, country:DE]; FROM_HAS_DN(0.00)[] X-Rspamd-Action: no action X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-3.0 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,SPF_HELO_NONE autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] xz: version bump 5.8.1 -> 5.8.4 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , From: Alexander Dahl via ptxdist Reply-To: ptxdist@pengutronix.de Cc: Alexander Dahl , =?UTF-8?q?Sven=20P=C3=BCschel?= Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false URL moved back to direct tarball download. PGP signed artifacts are present on release pages at GitHub/Codeberg/Sourceforge, and download section on authors site links to GitHub anyways. Checksums should match checksums from other distributions again. 5.8.2 fixed mainly minor build issues. Announcement for 5.8.3: > IMPORTANT: This includes a fix for CVE-2026-34743 which affects all XZ > Utils versions since 5.0.0. No new 5.2.x, 5.4.x, or 5.6.x releases will > be made, but the fix is in the v5.2, v5.4, and v5.6 branches in the xz > Git repository. Announcement for 5.8.4: > IMPORTANT: This includes a fix for a security issue that affects all XZ > Utils versions since 5.0.0. This and a few other fixes have also been > committed to the old stable branches (v5.2, v5.4, and v5.6) in the xz > Git repository. Those fixes are marked below. No new 5.2.x, 5.4.x, or > 5.6.x releases will be made. Contact address of Free Software Foundation changed in license files, otherwise unchanged. Link: https://tukaani.org/xz/#_stable Link: https://github.com/tukaani-project/xz/releases#release-v5.8.2 Link: https://github.com/tukaani-project/xz/releases#release-v5.8.3 Link: https://github.com/tukaani-project/xz/releases#release-v5.8.4 Signed-off-by: Alexander Dahl --- Notes: Not sure what security gain we have from tarballs created by GitHub? This just makes packaging harder. rules/xz.make | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/rules/xz.make b/rules/xz.make index fa8b544e5..d93ff2cf8 100644 --- a/rules/xz.make +++ b/rules/xz.make @@ -14,19 +14,19 @@ PACKAGES-$(PTXCONF_XZ) += xz # # Paths and names # -XZ_VERSION := 5.8.1 -XZ_SHA256 := bdbc23fbf9098843357e71e49685724fda2c320c29cb1b25fd90505f14bb0b3d +XZ_VERSION := 5.8.4 +XZ_SHA256 := 0014c7886930454fe8bd4228665b51af55eeae560ea135c9c4cd33f55b2591d9 XZ := xz-$(XZ_VERSION) XZ_SUFFIX := tar.gz -XZ_URL := https://github.com/tukaani-project/xz/archive/refs/tags/v$(XZ_VERSION).$(XZ_SUFFIX) +XZ_URL := https://github.com/tukaani-project/xz/releases/download/v$(XZ_VERSION)/$(XZ).$(XZ_SUFFIX) XZ_SOURCE := $(SRCDIR)/$(XZ).$(XZ_SUFFIX) XZ_DIR := $(BUILDDIR)/$(XZ) XZ_LICENSE := 0BSD AND public_domain AND LGPL-2.1-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later XZ_LICENSE_FILES := \ file://COPYING;md5=d38d562f6112174de93a9677682231b2 \ - file://COPYING.GPLv2;md5=b234ee4d69f5fce4486a80fdaf4a4263 \ + file://COPYING.GPLv2;md5=570a9b3749dd0463a1778803b12a6dce \ file://COPYING.GPLv3;md5=1ebbd3e34237af26da5dc08a4e440464 \ - file://COPYING.LGPLv2.1;md5=4fbd65380cdd255951079008b364516c + file://COPYING.LGPLv2.1;md5=4bf661c1e3793e55c8d1051bc5e0ae21 # ---------------------------------------------------------------------------- # Prepare base-commit: 32189152b5ddb01bf113a5c88c3efa8196acfeb5 -- 2.47.3