[ptxdist] [PATCH v2] xz: version bump 5.8.1 -> 5.8.4

[ptxdist] [PATCH v2] xz: version bump 5.8.1 -> 5.8.4

[Alexander Dahl via ptxdist]

5.8.2 fixed mainly minor build issues.

Announcement for 5.8.3:

> IMPORTANT: This includes a fix for CVE-2026-34743 which affects all XZ
> Utils versions since 5.0.0. No new 5.2.x, 5.4.x, or 5.6.x releases will
> be made, but the fix is in the v5.2, v5.4, and v5.6 branches in the xz
> Git repository.

Announcement for 5.8.4:

> IMPORTANT: This includes a fix for a security issue that affects all XZ
> Utils versions since 5.0.0. This and a few other fixes have also been
> committed to the old stable branches (v5.2, v5.4, and v5.6) in the xz
> Git repository. Those fixes are marked below. No new 5.2.x, 5.4.x, or
> 5.6.x releases will be made.

Contact address of Free Software Foundation changed in license files,
otherwise unchanged.

Link: https://tukaani.org/xz/#_stable
Link: https://github.com/tukaani-project/xz/releases#release-v5.8.2
Link: https://github.com/tukaani-project/xz/releases#release-v5.8.3
Link: https://github.com/tukaani-project/xz/releases#release-v5.8.4
Signed-off-by: Alexander Dahl <ada@thorsis.com>
---

Notes:
    v1 -> v2:
    - revert URL change

 rules/xz.make | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/rules/xz.make b/rules/xz.make
index fa8b544e5..d1714a14c 100644
--- a/rules/xz.make
+++ b/rules/xz.make
@@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_XZ) += xz
 #
 # Paths and names
 #
-XZ_VERSION	:= 5.8.1
-XZ_SHA256	:= bdbc23fbf9098843357e71e49685724fda2c320c29cb1b25fd90505f14bb0b3d
+XZ_VERSION	:= 5.8.4
+XZ_SHA256	:= b6b34c52e672e810d339db14e0c10b5b6f5f67a30d8d05cdac5d8cb4d82f78d5
 XZ		:= xz-$(XZ_VERSION)
 XZ_SUFFIX	:= tar.gz
 XZ_URL		:= https://github.com/tukaani-project/xz/archive/refs/tags/v$(XZ_VERSION).$(XZ_SUFFIX)
@@ -24,9 +24,9 @@ XZ_DIR		:= $(BUILDDIR)/$(XZ)
 XZ_LICENSE	:= 0BSD AND public_domain AND LGPL-2.1-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later
 XZ_LICENSE_FILES := \
 	file://COPYING;md5=d38d562f6112174de93a9677682231b2 \
-	file://COPYING.GPLv2;md5=b234ee4d69f5fce4486a80fdaf4a4263 \
+	file://COPYING.GPLv2;md5=570a9b3749dd0463a1778803b12a6dce \
 	file://COPYING.GPLv3;md5=1ebbd3e34237af26da5dc08a4e440464 \
-	file://COPYING.LGPLv2.1;md5=4fbd65380cdd255951079008b364516c
+	file://COPYING.LGPLv2.1;md5=4bf661c1e3793e55c8d1051bc5e0ae21
 
 # ----------------------------------------------------------------------------
 # Prepare

base-commit: fcc12d5604b0b5761cfec6f81b1964677ce4566d
-- 
2.47.3

Re: [ptxdist] [APPLIED] xz: version bump 5.8.1 -> 5.8.4

[Michael Olbrich]

Thanks, applied as 91e570630ce622fcad27dd5fe20bda9ad721582b.

Michael

[sent from post-receive hook]

On Tue, 06 Oct 2026 09:01:34 +0200, Alexander Dahl <ada@thorsis.com> wrote:
> 5.8.2 fixed mainly minor build issues.
> 
> Announcement for 5.8.3:
> 
> > IMPORTANT: This includes a fix for CVE-2026-34743 which affects all XZ
> > Utils versions since 5.0.0. No new 5.2.x, 5.4.x, or 5.6.x releases will
> > be made, but the fix is in the v5.2, v5.4, and v5.6 branches in the xz
> > Git repository.
> 
> Announcement for 5.8.4:
> 
> > IMPORTANT: This includes a fix for a security issue that affects all XZ
> > Utils versions since 5.0.0. This and a few other fixes have also been
> > committed to the old stable branches (v5.2, v5.4, and v5.6) in the xz
> > Git repository. Those fixes are marked below. No new 5.2.x, 5.4.x, or
> > 5.6.x releases will be made.
> 
> Contact address of Free Software Foundation changed in license files,
> otherwise unchanged.
> 
> Link: https://tukaani.org/xz/#_stable
> Link: https://github.com/tukaani-project/xz/releases#release-v5.8.2
> Link: https://github.com/tukaani-project/xz/releases#release-v5.8.3
> Link: https://github.com/tukaani-project/xz/releases#release-v5.8.4
> Signed-off-by: Alexander Dahl <ada@thorsis.com>
> Message-Id: <20260928090519.116329-1-ada@thorsis.com>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
> 
> diff --git a/rules/xz.make b/rules/xz.make
> index fa8b544e5aec..d1714a14c59f 100644
> --- a/rules/xz.make
> +++ b/rules/xz.make
> @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_XZ) += xz
>  #
>  # Paths and names
>  #
> -XZ_VERSION	:= 5.8.1
> -XZ_SHA256	:= bdbc23fbf9098843357e71e49685724fda2c320c29cb1b25fd90505f14bb0b3d
> +XZ_VERSION	:= 5.8.4
> +XZ_SHA256	:= b6b34c52e672e810d339db14e0c10b5b6f5f67a30d8d05cdac5d8cb4d82f78d5
>  XZ		:= xz-$(XZ_VERSION)
>  XZ_SUFFIX	:= tar.gz
>  XZ_URL		:= https://github.com/tukaani-project/xz/archive/refs/tags/v$(XZ_VERSION).$(XZ_SUFFIX)
> @@ -24,9 +24,9 @@ XZ_DIR		:= $(BUILDDIR)/$(XZ)
>  XZ_LICENSE	:= 0BSD AND public_domain AND LGPL-2.1-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later
>  XZ_LICENSE_FILES := \
>  	file://COPYING;md5=d38d562f6112174de93a9677682231b2 \
> -	file://COPYING.GPLv2;md5=b234ee4d69f5fce4486a80fdaf4a4263 \
> +	file://COPYING.GPLv2;md5=570a9b3749dd0463a1778803b12a6dce \
>  	file://COPYING.GPLv3;md5=1ebbd3e34237af26da5dc08a4e440464 \
> -	file://COPYING.LGPLv2.1;md5=4fbd65380cdd255951079008b364516c
> +	file://COPYING.LGPLv2.1;md5=4bf661c1e3793e55c8d1051bc5e0ae21
>  
>  # ----------------------------------------------------------------------------
>  # Prepare