Skip to content

rollback xz to 5.4.6 #16037

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
pdeslaur merged 2 commits into from
Mar 29, 2024
Merged

rollback xz to 5.4.6 #16037

pdeslaur merged 2 commits into from
Mar 29, 2024

Conversation

@imjasonh
Copy link
Member

@imjasonh imjasonh commented Mar 29, 2024

No description provided.

imjasonh added 2 commits March 29, 2024 14:07
@imjasonh
rollback xz to 5.4.6
8c2e91d 
Signed-off-by: Jason Hall <[email protected]>
@imjasonh
Update xz.yaml
89f1897 
Signed-off-by: Jason Hall <[email protected]>
smoser
smoser reviewed Mar 29, 2024
View reviewed changes
@github-actions
Copy link
Contributor

github-actions bot commented Mar 29, 2024

Package xz: Click to expand/collapse

Package xz:
Added: /usr/lib/liblzma.so.5.4.6
Added: /usr/share/doc/xz/TODO
Modified: /usr/bin/lzmadec
Modified: /usr/bin/lzmainfo
Modified: /usr/bin/xz
Modified: /usr/bin/xzdec
Modified: /usr/bin/xzdiff
Modified: /usr/bin/xzgrep
Modified: /usr/bin/xzless
Modified: /usr/bin/xzmore
Modified: /usr/share/doc/xz/AUTHORS
Modified: /usr/share/doc/xz/COPYING
Modified: /usr/share/doc/xz/NEWS
Modified: /usr/share/doc/xz/README
Modified: /usr/share/doc/xz/THANKS
Modified: /usr/share/doc/xz/api/annotated.html
Modified: /usr/share/doc/xz/api/base_8h.html
Modified: /usr/share/doc/xz/api/bcj_8h.html
Modified: /usr/share/doc/xz/api/block_8h.html
Modified: /usr/share/doc/xz/api/check_8h.html
Modified: /usr/share/doc/xz/api/classes.html
Modified: /usr/share/doc/xz/api/container_8h.html
Modified: /usr/share/doc/xz/api/delta_8h.html
Modified: /usr/share/doc/xz/api/dir_b17a1d403082bd69a703ed987cf158fb.html
Modified: /usr/share/doc/xz/api/files.html
Modified: /usr/share/doc/xz/api/filter_8h.html
Modified: /usr/share/doc/xz/api/functions.html
Modified: /usr/share/doc/xz/api/functions_vars.html
Modified: /usr/share/doc/xz/api/globals.html
Modified: /usr/share/doc/xz/api/globals_defs.html
Modified: /usr/share/doc/xz/api/globals_enum.html
Modified: /usr/share/doc/xz/api/globals_eval.html
Modified: /usr/share/doc/xz/api/globals_func.html
Modified: /usr/share/doc/xz/api/globals_type.html
Modified: /usr/share/doc/xz/api/hardware_8h.html
Modified: /usr/share/doc/xz/api/index.html
Modified: /usr/share/doc/xz/api/index_8h.html
Modified: /usr/share/doc/xz/api/index__hash_8h.html
Modified: /usr/share/doc/xz/api/lzma12_8h.html
Modified: /usr/share/doc/xz/api/lzma_8h.html
Modified: /usr/share/doc/xz/api/stream__flags_8h.html
Modified: /usr/share/doc/xz/api/structlzma__allocator.html
Modified: /usr/share/doc/xz/api/structlzma__block.html
Modified: /usr/share/doc/xz/api/structlzma__filter.html
Modified: /usr/share/doc/xz/api/structlzma__index__iter.html
Modified: /usr/share/doc/xz/api/structlzma__mt.html
Modified: /usr/share/doc/xz/api/structlzma__options__bcj.html
Modified: /usr/share/doc/xz/api/structlzma__options__delta.html
Modified: /usr/share/doc/xz/api/structlzma__options__lzma.html
Modified: /usr/share/doc/xz/api/structlzma__stream.html
Modified: /usr/share/doc/xz/api/structlzma__stream__flags.html
Modified: /usr/share/doc/xz/api/version_8h.html
Modified: /usr/share/doc/xz/api/vli_8h.html
Modified: /usr/share/doc/xz/examples/Makefile
Modified: /usr/share/locale/ca/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/cs/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/da/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/de/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/eo/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/es/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/fi/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/fr/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/hr/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/hu/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/it/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/ko/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/pl/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/pt/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/pt_BR/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/ro/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/sr/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/sv/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/tr/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/uk/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/vi/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/zh_CN/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/zh_TW/LC_MESSAGES/xz.mo
Deleted: /usr/lib/liblzma.so.5.6.1
Deleted: /usr/share/doc/xz/COPYING.0BSD
Deleted: /usr/share/doc/xz/api/COPYING.CC-BY-SA-4.0
Deleted: /usr/share/doc/xz/api/xz-logo.png

Package xz-dev: Click to expand/collapse

Package xz-dev:
Added: /usr/share/doc/xz/examples_old/xz_pipe_comp.c
Added: /usr/share/doc/xz/examples_old/xz_pipe_decomp.c
Modified: /usr/include/lzma/base.h
Modified: /usr/include/lzma/bcj.h
Modified: /usr/include/lzma/block.h
Modified: /usr/include/lzma/check.h
Modified: /usr/include/lzma/container.h
Modified: /usr/include/lzma/delta.h
Modified: /usr/include/lzma/filter.h
Modified: /usr/include/lzma/hardware.h
Modified: /usr/include/lzma/index.h
Modified: /usr/include/lzma/index_hash.h
Modified: /usr/include/lzma/lzma12.h
Modified: /usr/include/lzma/stream_flags.h
Modified: /usr/include/lzma/version.h
Modified: /usr/include/lzma/vli.h
Modified: /usr/include/lzma.h
Modified: /usr/lib/liblzma.a
Modified: /usr/lib/pkgconfig/liblzma.pc
Modified: /usr/share/doc/xz/examples/01_compress_easy.c
Modified: /usr/share/doc/xz/examples/02_decompress.c
Modified: /usr/share/doc/xz/examples/03_compress_custom.c
Modified: /usr/share/doc/xz/examples/04_compress_easy_mt.c
Deleted: /usr/share/doc/xz/examples/11_file_info.c

Package xz-doc: Click to expand/collapse

Package xz-doc:
Added: /usr/share/man/fr/man1/xzdiff.1
Added: /usr/share/man/fr/man1/xzmore.1
Added: /usr/share/man/pt_BR/man1/xzdiff.1
Added: /usr/share/man/pt_BR/man1/xzgrep.1
Added: /usr/share/man/pt_BR/man1/xzmore.1
Modified: /usr/share/man/de/man1/xz.1
Modified: /usr/share/man/de/man1/xzdec.1
Modified: /usr/share/man/de/man1/xzdiff.1
Modified: /usr/share/man/de/man1/xzgrep.1
Modified: /usr/share/man/de/man1/xzless.1
Modified: /usr/share/man/de/man1/xzmore.1
Modified: /usr/share/man/fr/man1/xz.1
Modified: /usr/share/man/fr/man1/xzdec.1
Modified: /usr/share/man/fr/man1/xzless.1
Modified: /usr/share/man/ko/man1/xz.1
Modified: /usr/share/man/ko/man1/xzdec.1
Modified: /usr/share/man/ko/man1/xzdiff.1
Modified: /usr/share/man/ko/man1/xzgrep.1
Modified: /usr/share/man/ko/man1/xzless.1
Modified: /usr/share/man/ko/man1/xzmore.1
Modified: /usr/share/man/man1/lzmainfo.1
Modified: /usr/share/man/man1/xz.1
Modified: /usr/share/man/man1/xzdec.1
Modified: /usr/share/man/man1/xzdiff.1
Modified: /usr/share/man/man1/xzgrep.1
Modified: /usr/share/man/man1/xzless.1
Modified: /usr/share/man/man1/xzmore.1
Modified: /usr/share/man/pt_BR/man1/xz.1
Modified: /usr/share/man/pt_BR/man1/xzdec.1
Modified: /usr/share/man/pt_BR/man1/xzless.1
Modified: /usr/share/man/ro/man1/xz.1
Modified: /usr/share/man/ro/man1/xzdec.1
Modified: /usr/share/man/ro/man1/xzdiff.1
Modified: /usr/share/man/ro/man1/xzgrep.1
Modified: /usr/share/man/ro/man1/xzless.1
Modified: /usr/share/man/ro/man1/xzmore.1
Modified: /usr/share/man/uk/man1/xz.1
Modified: /usr/share/man/uk/man1/xzdec.1
Modified: /usr/share/man/uk/man1/xzdiff.1
Modified: /usr/share/man/uk/man1/xzgrep.1
Modified: /usr/share/man/uk/man1/xzless.1
Modified: /usr/share/man/uk/man1/xzmore.1
Deleted: /usr/share/man/de/man1/lzmainfo.1
Deleted: /usr/share/man/fr/man1/lzmainfo.1
Deleted: /usr/share/man/ko/man1/lzmainfo.1
Deleted: /usr/share/man/pt_BR/man1/lzmainfo.1
Deleted: /usr/share/man/ro/man1/lzmainfo.1
Deleted: /usr/share/man/uk/man1/lzmainfo.1

@github-actions
Copy link
Contributor

github-actions bot commented Mar 29, 2024

Package xz-doc: Click to expand/collapse

Package xz-doc:
Added: /usr/share/man/fr/man1/xzdiff.1
Added: /usr/share/man/fr/man1/xzmore.1
Added: /usr/share/man/pt_BR/man1/xzdiff.1
Added: /usr/share/man/pt_BR/man1/xzgrep.1
Added: /usr/share/man/pt_BR/man1/xzmore.1
Modified: /usr/share/man/de/man1/xz.1
Modified: /usr/share/man/de/man1/xzdec.1
Modified: /usr/share/man/de/man1/xzdiff.1
Modified: /usr/share/man/de/man1/xzgrep.1
Modified: /usr/share/man/de/man1/xzless.1
Modified: /usr/share/man/de/man1/xzmore.1
Modified: /usr/share/man/fr/man1/xz.1
Modified: /usr/share/man/fr/man1/xzdec.1
Modified: /usr/share/man/fr/man1/xzless.1
Modified: /usr/share/man/ko/man1/xz.1
Modified: /usr/share/man/ko/man1/xzdec.1
Modified: /usr/share/man/ko/man1/xzdiff.1
Modified: /usr/share/man/ko/man1/xzgrep.1
Modified: /usr/share/man/ko/man1/xzless.1
Modified: /usr/share/man/ko/man1/xzmore.1
Modified: /usr/share/man/man1/lzmainfo.1
Modified: /usr/share/man/man1/xz.1
Modified: /usr/share/man/man1/xzdec.1
Modified: /usr/share/man/man1/xzdiff.1
Modified: /usr/share/man/man1/xzgrep.1
Modified: /usr/share/man/man1/xzless.1
Modified: /usr/share/man/man1/xzmore.1
Modified: /usr/share/man/pt_BR/man1/xz.1
Modified: /usr/share/man/pt_BR/man1/xzdec.1
Modified: /usr/share/man/pt_BR/man1/xzless.1
Modified: /usr/share/man/ro/man1/xz.1
Modified: /usr/share/man/ro/man1/xzdec.1
Modified: /usr/share/man/ro/man1/xzdiff.1
Modified: /usr/share/man/ro/man1/xzgrep.1
Modified: /usr/share/man/ro/man1/xzless.1
Modified: /usr/share/man/ro/man1/xzmore.1
Modified: /usr/share/man/uk/man1/xz.1
Modified: /usr/share/man/uk/man1/xzdec.1
Modified: /usr/share/man/uk/man1/xzdiff.1
Modified: /usr/share/man/uk/man1/xzgrep.1
Modified: /usr/share/man/uk/man1/xzless.1
Modified: /usr/share/man/uk/man1/xzmore.1
Deleted: /usr/share/man/de/man1/lzmainfo.1
Deleted: /usr/share/man/fr/man1/lzmainfo.1
Deleted: /usr/share/man/ko/man1/lzmainfo.1
Deleted: /usr/share/man/pt_BR/man1/lzmainfo.1
Deleted: /usr/share/man/ro/man1/lzmainfo.1
Deleted: /usr/share/man/uk/man1/lzmainfo.1

Package xz: Click to expand/collapse

Package xz:
Added: /usr/lib/liblzma.so.5.4.6
Added: /usr/share/doc/xz/TODO
Modified: /usr/bin/lzmadec
Modified: /usr/bin/lzmainfo
Modified: /usr/bin/xz
Modified: /usr/bin/xzdec
Modified: /usr/bin/xzdiff
Modified: /usr/bin/xzgrep
Modified: /usr/bin/xzless
Modified: /usr/bin/xzmore
Modified: /usr/share/doc/xz/AUTHORS
Modified: /usr/share/doc/xz/COPYING
Modified: /usr/share/doc/xz/NEWS
Modified: /usr/share/doc/xz/README
Modified: /usr/share/doc/xz/THANKS
Modified: /usr/share/doc/xz/api/annotated.html
Modified: /usr/share/doc/xz/api/base_8h.html
Modified: /usr/share/doc/xz/api/bcj_8h.html
Modified: /usr/share/doc/xz/api/block_8h.html
Modified: /usr/share/doc/xz/api/check_8h.html
Modified: /usr/share/doc/xz/api/classes.html
Modified: /usr/share/doc/xz/api/container_8h.html
Modified: /usr/share/doc/xz/api/delta_8h.html
Modified: /usr/share/doc/xz/api/dir_b17a1d403082bd69a703ed987cf158fb.html
Modified: /usr/share/doc/xz/api/files.html
Modified: /usr/share/doc/xz/api/filter_8h.html
Modified: /usr/share/doc/xz/api/functions.html
Modified: /usr/share/doc/xz/api/functions_vars.html
Modified: /usr/share/doc/xz/api/globals.html
Modified: /usr/share/doc/xz/api/globals_defs.html
Modified: /usr/share/doc/xz/api/globals_enum.html
Modified: /usr/share/doc/xz/api/globals_eval.html
Modified: /usr/share/doc/xz/api/globals_func.html
Modified: /usr/share/doc/xz/api/globals_type.html
Modified: /usr/share/doc/xz/api/hardware_8h.html
Modified: /usr/share/doc/xz/api/index.html
Modified: /usr/share/doc/xz/api/index_8h.html
Modified: /usr/share/doc/xz/api/index__hash_8h.html
Modified: /usr/share/doc/xz/api/lzma12_8h.html
Modified: /usr/share/doc/xz/api/lzma_8h.html
Modified: /usr/share/doc/xz/api/stream__flags_8h.html
Modified: /usr/share/doc/xz/api/structlzma__allocator.html
Modified: /usr/share/doc/xz/api/structlzma__block.html
Modified: /usr/share/doc/xz/api/structlzma__filter.html
Modified: /usr/share/doc/xz/api/structlzma__index__iter.html
Modified: /usr/share/doc/xz/api/structlzma__mt.html
Modified: /usr/share/doc/xz/api/structlzma__options__bcj.html
Modified: /usr/share/doc/xz/api/structlzma__options__delta.html
Modified: /usr/share/doc/xz/api/structlzma__options__lzma.html
Modified: /usr/share/doc/xz/api/structlzma__stream.html
Modified: /usr/share/doc/xz/api/structlzma__stream__flags.html
Modified: /usr/share/doc/xz/api/version_8h.html
Modified: /usr/share/doc/xz/api/vli_8h.html
Modified: /usr/share/doc/xz/examples/Makefile
Modified: /usr/share/locale/ca/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/cs/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/da/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/de/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/eo/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/es/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/fi/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/fr/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/hr/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/hu/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/it/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/ko/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/pl/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/pt/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/pt_BR/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/ro/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/sr/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/sv/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/tr/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/uk/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/vi/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/zh_CN/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/zh_TW/LC_MESSAGES/xz.mo
Deleted: /usr/lib/liblzma.so.5.6.1
Deleted: /usr/share/doc/xz/COPYING.0BSD
Deleted: /usr/share/doc/xz/api/COPYING.CC-BY-SA-4.0
Deleted: /usr/share/doc/xz/api/xz-logo.png

Package xz-dev: Click to expand/collapse

Package xz-dev:
Added: /usr/share/doc/xz/examples_old/xz_pipe_comp.c
Added: /usr/share/doc/xz/examples_old/xz_pipe_decomp.c
Modified: /usr/include/lzma/base.h
Modified: /usr/include/lzma/bcj.h
Modified: /usr/include/lzma/block.h
Modified: /usr/include/lzma/check.h
Modified: /usr/include/lzma/container.h
Modified: /usr/include/lzma/delta.h
Modified: /usr/include/lzma/filter.h
Modified: /usr/include/lzma/hardware.h
Modified: /usr/include/lzma/index.h
Modified: /usr/include/lzma/index_hash.h
Modified: /usr/include/lzma/lzma12.h
Modified: /usr/include/lzma/stream_flags.h
Modified: /usr/include/lzma/version.h
Modified: /usr/include/lzma/vli.h
Modified: /usr/include/lzma.h
Modified: /usr/lib/liblzma.a
Modified: /usr/lib/pkgconfig/liblzma.pc
Modified: /usr/share/doc/xz/examples/01_compress_easy.c
Modified: /usr/share/doc/xz/examples/02_decompress.c
Modified: /usr/share/doc/xz/examples/03_compress_custom.c
Modified: /usr/share/doc/xz/examples/04_compress_easy_mt.c
Deleted: /usr/share/doc/xz/examples/11_file_info.c

@pdeslaur pdeslaur merged commit 87776eb into main Mar 29, 2024
@pdeslaur pdeslaur deleted the imjasonh-patch-5 branch March 29, 2024 18:14
@ruppde
Copy link

ruppde commented Mar 29, 2024 •
edited
Loading

let's add the reason for the rollback:
The upstream xz repository and the xz tarballs have been backdoored.
https://www.openwall.com/lists/oss-security/2024/03/29/4

please consider not immediately installing any new version but wait e.g. one month.

This was referenced Nov 21, 2024
Merged
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@smoser smoser smoser left review comments

@pdeslaur pdeslaur pdeslaur approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@imjasonh @ruppde @smoser @pdeslaur