From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 06 Oct 2026 09:02:16 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xDzBo-00AOyw-0R for lore@lore.pengutronix.de; Tue, 06 Oct 2026 09:02:16 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xDzBm-0003Q5-5W; Tue, 06 Oct 2026 09:02:14 +0200 Received: from mx1.white.stw.pengutronix.de ([2a0a:edc0:0:b01:1d::107]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xDzB8-0000a1-B0 for ptxdist@pengutronix.de; Tue, 06 Oct 2026 09:01:34 +0200 Received: from dude05.red.stw.pengutronix.de (dude05.red.stw.pengutronix.de [IPv6:2a0a:edc0:0:1101:1d::54]) (Authenticated sender: relay-from-dude05.red.stw.pengutronix.de) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPSA id 48A242012A4; Tue, 06 Oct 2026 09:01:34 +0200 (CEST) ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1791270094; a=rsa-sha256; cv=none; b=WCrG7Kazk4Pt8jVOm2FrMIjL0G0/2xp3M+iIDLaVXmdrtUZ9fTKLipmJCwtgvcVMrVcsCV WUNoGkxeWVc/E6V+2BBc2fFdCjNvbL+izhqvXB3EulGeDghNtnxfyEM1qlgfoJuciZQtda coeYzPi3JPkxMLENeN8tiBxyo3raNKqOdGpDBMqIP6oyeOqav75qLkyz74INvy/brU9Zpk 0w/Qgs0mZfUsMCZItzEKOJSGLy8QqVjExGL9mdXrEXZSqUZNzHISgCFYaLB1fwnuzJq+ux GHRclAG/7+cEnEGIz1PbXJF0kDJwlMIQKgkrYvWpTISmJ0mPC1roV0VfuRWLTg== ARC-Authentication-Results: i=1; ORIGINATING; auth=pass smtp.auth=relay-from-dude05.red.stw.pengutronix.de smtp.mailfrom=mol@pengutronix.de ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1791270094; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=/7LntjajKeZzPrE57VRB96AjwlAihF4+UXQvEx3m69o=; b=R1MZ13LJIz4pibb/T/ldeT/lhEbY2YvISr5QkPq0NIyeHdDdeKc8gZqPe6RxE6Zv5uqoE4 M4vn7pzBhoGvNAM3Cocd1/En2PT+f6fOvZaJfSbl/KBjLFyU21WL4tbubI+tishmgmf8Qs 6SvxcyeYaHpInjMeVyd+oqwJ0jaOplj+hRxocfGy5Z7CocXzNuJSikBdUiAzMzp52h4Xfi 6CZWLC9TIOPxnoyxVy2WqZ6qdu8Qc1ixj8EbIbKL70vN1fNccOC+ID5S9MzY0NbqzYkl62 nEbX/b7Ol1eEzAA+2kuhDgvKX9BXrmoq4wk2NOvGY5rUWJmKZHX0qGDa66xddg== Received: by dude05.red.stw.pengutronix.de (Postfix, from userid 1014) id 3A77E742505; Tue, 06 Oct 2026 09:01:34 +0200 (CEST) From: Michael Olbrich To: ptxdist@pengutronix.de Date: Tue, 6 Oct 2026 09:01:34 +0200 Message-ID: <20261006070134.2792948-1-m.olbrich@pengutronix.de> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20260928090519.116329-1-ada@thorsis.com> References: <20260928090519.116329-1-ada@thorsis.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: Re: [ptxdist] [APPLIED] xz: version bump 5.8.1 -> 5.8.4 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: Alexander Dahl Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Thanks, applied as 91e570630ce622fcad27dd5fe20bda9ad721582b. Michael [sent from post-receive hook] On Tue, 06 Oct 2026 09:01:34 +0200, Alexander Dahl wrote: > 5.8.2 fixed mainly minor build issues. > > Announcement for 5.8.3: > > > IMPORTANT: This includes a fix for CVE-2026-34743 which affects all XZ > > Utils versions since 5.0.0. No new 5.2.x, 5.4.x, or 5.6.x releases will > > be made, but the fix is in the v5.2, v5.4, and v5.6 branches in the xz > > Git repository. > > Announcement for 5.8.4: > > > IMPORTANT: This includes a fix for a security issue that affects all XZ > > Utils versions since 5.0.0. This and a few other fixes have also been > > committed to the old stable branches (v5.2, v5.4, and v5.6) in the xz > > Git repository. Those fixes are marked below. No new 5.2.x, 5.4.x, or > > 5.6.x releases will be made. > > Contact address of Free Software Foundation changed in license files, > otherwise unchanged. > > Link: https://tukaani.org/xz/#_stable > Link: https://github.com/tukaani-project/xz/releases#release-v5.8.2 > Link: https://github.com/tukaani-project/xz/releases#release-v5.8.3 > Link: https://github.com/tukaani-project/xz/releases#release-v5.8.4 > Signed-off-by: Alexander Dahl > Message-Id: <20260928090519.116329-1-ada@thorsis.com> > Signed-off-by: Michael Olbrich > > diff --git a/rules/xz.make b/rules/xz.make > index fa8b544e5aec..d1714a14c59f 100644 > --- a/rules/xz.make > +++ b/rules/xz.make > @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_XZ) += xz > # > # Paths and names > # > -XZ_VERSION := 5.8.1 > -XZ_SHA256 := bdbc23fbf9098843357e71e49685724fda2c320c29cb1b25fd90505f14bb0b3d > +XZ_VERSION := 5.8.4 > +XZ_SHA256 := b6b34c52e672e810d339db14e0c10b5b6f5f67a30d8d05cdac5d8cb4d82f78d5 > XZ := xz-$(XZ_VERSION) > XZ_SUFFIX := tar.gz > XZ_URL := https://github.com/tukaani-project/xz/archive/refs/tags/v$(XZ_VERSION).$(XZ_SUFFIX) > @@ -24,9 +24,9 @@ XZ_DIR := $(BUILDDIR)/$(XZ) > XZ_LICENSE := 0BSD AND public_domain AND LGPL-2.1-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later > XZ_LICENSE_FILES := \ > file://COPYING;md5=d38d562f6112174de93a9677682231b2 \ > - file://COPYING.GPLv2;md5=b234ee4d69f5fce4486a80fdaf4a4263 \ > + file://COPYING.GPLv2;md5=570a9b3749dd0463a1778803b12a6dce \ > file://COPYING.GPLv3;md5=1ebbd3e34237af26da5dc08a4e440464 \ > - file://COPYING.LGPLv2.1;md5=4fbd65380cdd255951079008b364516c > + file://COPYING.LGPLv2.1;md5=4bf661c1e3793e55c8d1051bc5e0ae21 > > # ---------------------------------------------------------------------------- > # Prepare