Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

rollback xz to 5.4.6 #16037

Merged
merged 2 commits into from
Mar 29, 2024
Merged

rollback xz to 5.4.6 #16037

merged 2 commits into from
Mar 29, 2024

Conversation

imjasonh
Copy link
Member

No description provided.

imjasonh added 2 commits March 29, 2024 14:07
@imjasonh
rollback xz to 5.4.6
8c2e91d 
Signed-off-by: Jason Hall <[email protected]>
@imjasonh
Update xz.yaml
89f1897 
Signed-off-by: Jason Hall <[email protected]>
smoser
smoser reviewed Mar 29, 2024
View reviewed changes
xz.yaml Show resolved Hide resolved
@github-actions GitHub Actions
Copy link
Contributor

Package xz: Click to expand/collapse

Package xz:
Added: /usr/lib/liblzma.so.5.4.6
Added: /usr/share/doc/xz/TODO
Modified: /usr/bin/lzmadec
Modified: /usr/bin/lzmainfo
Modified: /usr/bin/xz
Modified: /usr/bin/xzdec
Modified: /usr/bin/xzdiff
Modified: /usr/bin/xzgrep
Modified: /usr/bin/xzless
Modified: /usr/bin/xzmore
Modified: /usr/share/doc/xz/AUTHORS
Modified: /usr/share/doc/xz/COPYING
Modified: /usr/share/doc/xz/NEWS
Modified: /usr/share/doc/xz/README
Modified: /usr/share/doc/xz/THANKS
Modified: /usr/share/doc/xz/api/annotated.html
Modified: /usr/share/doc/xz/api/base_8h.html
Modified: /usr/share/doc/xz/api/bcj_8h.html
Modified: /usr/share/doc/xz/api/block_8h.html
Modified: /usr/share/doc/xz/api/check_8h.html
Modified: /usr/share/doc/xz/api/classes.html
Modified: /usr/share/doc/xz/api/container_8h.html
Modified: /usr/share/doc/xz/api/delta_8h.html
Modified: /usr/share/doc/xz/api/dir_b17a1d403082bd69a703ed987cf158fb.html
Modified: /usr/share/doc/xz/api/files.html
Modified: /usr/share/doc/xz/api/filter_8h.html
Modified: /usr/share/doc/xz/api/functions.html
Modified: /usr/share/doc/xz/api/functions_vars.html
Modified: /usr/share/doc/xz/api/globals.html
Modified: /usr/share/doc/xz/api/globals_defs.html
Modified: /usr/share/doc/xz/api/globals_enum.html
Modified: /usr/share/doc/xz/api/globals_eval.html
Modified: /usr/share/doc/xz/api/globals_func.html
Modified: /usr/share/doc/xz/api/globals_type.html
Modified: /usr/share/doc/xz/api/hardware_8h.html
Modified: /usr/share/doc/xz/api/index.html
Modified: /usr/share/doc/xz/api/index_8h.html
Modified: /usr/share/doc/xz/api/index__hash_8h.html
Modified: /usr/share/doc/xz/api/lzma12_8h.html
Modified: /usr/share/doc/xz/api/lzma_8h.html
Modified: /usr/share/doc/xz/api/stream__flags_8h.html
Modified: /usr/share/doc/xz/api/structlzma__allocator.html
Modified: /usr/share/doc/xz/api/structlzma__block.html
Modified: /usr/share/doc/xz/api/structlzma__filter.html
Modified: /usr/share/doc/xz/api/structlzma__index__iter.html
Modified: /usr/share/doc/xz/api/structlzma__mt.html
Modified: /usr/share/doc/xz/api/structlzma__options__bcj.html
Modified: /usr/share/doc/xz/api/structlzma__options__delta.html
Modified: /usr/share/doc/xz/api/structlzma__options__lzma.html
Modified: /usr/share/doc/xz/api/structlzma__stream.html
Modified: /usr/share/doc/xz/api/structlzma__stream__flags.html
Modified: /usr/share/doc/xz/api/version_8h.html
Modified: /usr/share/doc/xz/api/vli_8h.html
Modified: /usr/share/doc/xz/examples/Makefile
Modified: /usr/share/locale/ca/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/cs/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/da/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/de/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/eo/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/es/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/fi/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/fr/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/hr/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/hu/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/it/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/ko/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/pl/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/pt/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/pt_BR/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/ro/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/sr/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/sv/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/tr/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/uk/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/vi/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/zh_CN/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/zh_TW/LC_MESSAGES/xz.mo
Deleted: /usr/lib/liblzma.so.5.6.1
Deleted: /usr/share/doc/xz/COPYING.0BSD
Deleted: /usr/share/doc/xz/api/COPYING.CC-BY-SA-4.0
Deleted: /usr/share/doc/xz/api/xz-logo.png

Package xz-dev: Click to expand/collapse

Package xz-dev:
Added: /usr/share/doc/xz/examples_old/xz_pipe_comp.c
Added: /usr/share/doc/xz/examples_old/xz_pipe_decomp.c
Modified: /usr/include/lzma/base.h
Modified: /usr/include/lzma/bcj.h
Modified: /usr/include/lzma/block.h
Modified: /usr/include/lzma/check.h
Modified: /usr/include/lzma/container.h
Modified: /usr/include/lzma/delta.h
Modified: /usr/include/lzma/filter.h
Modified: /usr/include/lzma/hardware.h
Modified: /usr/include/lzma/index.h
Modified: /usr/include/lzma/index_hash.h
Modified: /usr/include/lzma/lzma12.h
Modified: /usr/include/lzma/stream_flags.h
Modified: /usr/include/lzma/version.h
Modified: /usr/include/lzma/vli.h
Modified: /usr/include/lzma.h
Modified: /usr/lib/liblzma.a
Modified: /usr/lib/pkgconfig/liblzma.pc
Modified: /usr/share/doc/xz/examples/01_compress_easy.c
Modified: /usr/share/doc/xz/examples/02_decompress.c
Modified: /usr/share/doc/xz/examples/03_compress_custom.c
Modified: /usr/share/doc/xz/examples/04_compress_easy_mt.c
Deleted: /usr/share/doc/xz/examples/11_file_info.c

Package xz-doc: Click to expand/collapse

Package xz-doc:
Added: /usr/share/man/fr/man1/xzdiff.1
Added: /usr/share/man/fr/man1/xzmore.1
Added: /usr/share/man/pt_BR/man1/xzdiff.1
Added: /usr/share/man/pt_BR/man1/xzgrep.1
Added: /usr/share/man/pt_BR/man1/xzmore.1
Modified: /usr/share/man/de/man1/xz.1
Modified: /usr/share/man/de/man1/xzdec.1
Modified: /usr/share/man/de/man1/xzdiff.1
Modified: /usr/share/man/de/man1/xzgrep.1
Modified: /usr/share/man/de/man1/xzless.1
Modified: /usr/share/man/de/man1/xzmore.1
Modified: /usr/share/man/fr/man1/xz.1
Modified: /usr/share/man/fr/man1/xzdec.1
Modified: /usr/share/man/fr/man1/xzless.1
Modified: /usr/share/man/ko/man1/xz.1
Modified: /usr/share/man/ko/man1/xzdec.1
Modified: /usr/share/man/ko/man1/xzdiff.1
Modified: /usr/share/man/ko/man1/xzgrep.1
Modified: /usr/share/man/ko/man1/xzless.1
Modified: /usr/share/man/ko/man1/xzmore.1
Modified: /usr/share/man/man1/lzmainfo.1
Modified: /usr/share/man/man1/xz.1
Modified: /usr/share/man/man1/xzdec.1
Modified: /usr/share/man/man1/xzdiff.1
Modified: /usr/share/man/man1/xzgrep.1
Modified: /usr/share/man/man1/xzless.1
Modified: /usr/share/man/man1/xzmore.1
Modified: /usr/share/man/pt_BR/man1/xz.1
Modified: /usr/share/man/pt_BR/man1/xzdec.1
Modified: /usr/share/man/pt_BR/man1/xzless.1
Modified: /usr/share/man/ro/man1/xz.1
Modified: /usr/share/man/ro/man1/xzdec.1
Modified: /usr/share/man/ro/man1/xzdiff.1
Modified: /usr/share/man/ro/man1/xzgrep.1
Modified: /usr/share/man/ro/man1/xzless.1
Modified: /usr/share/man/ro/man1/xzmore.1
Modified: /usr/share/man/uk/man1/xz.1
Modified: /usr/share/man/uk/man1/xzdec.1
Modified: /usr/share/man/uk/man1/xzdiff.1
Modified: /usr/share/man/uk/man1/xzgrep.1
Modified: /usr/share/man/uk/man1/xzless.1
Modified: /usr/share/man/uk/man1/xzmore.1
Deleted: /usr/share/man/de/man1/lzmainfo.1
Deleted: /usr/share/man/fr/man1/lzmainfo.1
Deleted: /usr/share/man/ko/man1/lzmainfo.1
Deleted: /usr/share/man/pt_BR/man1/lzmainfo.1
Deleted: /usr/share/man/ro/man1/lzmainfo.1
Deleted: /usr/share/man/uk/man1/lzmainfo.1

@github-actions GitHub Actions
Copy link
Contributor

Package xz-doc: Click to expand/collapse

Package xz-doc:
Added: /usr/share/man/fr/man1/xzdiff.1
Added: /usr/share/man/fr/man1/xzmore.1
Added: /usr/share/man/pt_BR/man1/xzdiff.1
Added: /usr/share/man/pt_BR/man1/xzgrep.1
Added: /usr/share/man/pt_BR/man1/xzmore.1
Modified: /usr/share/man/de/man1/xz.1
Modified: /usr/share/man/de/man1/xzdec.1
Modified: /usr/share/man/de/man1/xzdiff.1
Modified: /usr/share/man/de/man1/xzgrep.1
Modified: /usr/share/man/de/man1/xzless.1
Modified: /usr/share/man/de/man1/xzmore.1
Modified: /usr/share/man/fr/man1/xz.1
Modified: /usr/share/man/fr/man1/xzdec.1
Modified: /usr/share/man/fr/man1/xzless.1
Modified: /usr/share/man/ko/man1/xz.1
Modified: /usr/share/man/ko/man1/xzdec.1
Modified: /usr/share/man/ko/man1/xzdiff.1
Modified: /usr/share/man/ko/man1/xzgrep.1
Modified: /usr/share/man/ko/man1/xzless.1
Modified: /usr/share/man/ko/man1/xzmore.1
Modified: /usr/share/man/man1/lzmainfo.1
Modified: /usr/share/man/man1/xz.1
Modified: /usr/share/man/man1/xzdec.1
Modified: /usr/share/man/man1/xzdiff.1
Modified: /usr/share/man/man1/xzgrep.1
Modified: /usr/share/man/man1/xzless.1
Modified: /usr/share/man/man1/xzmore.1
Modified: /usr/share/man/pt_BR/man1/xz.1
Modified: /usr/share/man/pt_BR/man1/xzdec.1
Modified: /usr/share/man/pt_BR/man1/xzless.1
Modified: /usr/share/man/ro/man1/xz.1
Modified: /usr/share/man/ro/man1/xzdec.1
Modified: /usr/share/man/ro/man1/xzdiff.1
Modified: /usr/share/man/ro/man1/xzgrep.1
Modified: /usr/share/man/ro/man1/xzless.1
Modified: /usr/share/man/ro/man1/xzmore.1
Modified: /usr/share/man/uk/man1/xz.1
Modified: /usr/share/man/uk/man1/xzdec.1
Modified: /usr/share/man/uk/man1/xzdiff.1
Modified: /usr/share/man/uk/man1/xzgrep.1
Modified: /usr/share/man/uk/man1/xzless.1
Modified: /usr/share/man/uk/man1/xzmore.1
Deleted: /usr/share/man/de/man1/lzmainfo.1
Deleted: /usr/share/man/fr/man1/lzmainfo.1
Deleted: /usr/share/man/ko/man1/lzmainfo.1
Deleted: /usr/share/man/pt_BR/man1/lzmainfo.1
Deleted: /usr/share/man/ro/man1/lzmainfo.1
Deleted: /usr/share/man/uk/man1/lzmainfo.1

Package xz: Click to expand/collapse

Package xz:
Added: /usr/lib/liblzma.so.5.4.6
Added: /usr/share/doc/xz/TODO
Modified: /usr/bin/lzmadec
Modified: /usr/bin/lzmainfo
Modified: /usr/bin/xz
Modified: /usr/bin/xzdec
Modified: /usr/bin/xzdiff
Modified: /usr/bin/xzgrep
Modified: /usr/bin/xzless
Modified: /usr/bin/xzmore
Modified: /usr/share/doc/xz/AUTHORS
Modified: /usr/share/doc/xz/COPYING
Modified: /usr/share/doc/xz/NEWS
Modified: /usr/share/doc/xz/README
Modified: /usr/share/doc/xz/THANKS
Modified: /usr/share/doc/xz/api/annotated.html
Modified: /usr/share/doc/xz/api/base_8h.html
Modified: /usr/share/doc/xz/api/bcj_8h.html
Modified: /usr/share/doc/xz/api/block_8h.html
Modified: /usr/share/doc/xz/api/check_8h.html
Modified: /usr/share/doc/xz/api/classes.html
Modified: /usr/share/doc/xz/api/container_8h.html
Modified: /usr/share/doc/xz/api/delta_8h.html
Modified: /usr/share/doc/xz/api/dir_b17a1d403082bd69a703ed987cf158fb.html
Modified: /usr/share/doc/xz/api/files.html
Modified: /usr/share/doc/xz/api/filter_8h.html
Modified: /usr/share/doc/xz/api/functions.html
Modified: /usr/share/doc/xz/api/functions_vars.html
Modified: /usr/share/doc/xz/api/globals.html
Modified: /usr/share/doc/xz/api/globals_defs.html
Modified: /usr/share/doc/xz/api/globals_enum.html
Modified: /usr/share/doc/xz/api/globals_eval.html
Modified: /usr/share/doc/xz/api/globals_func.html
Modified: /usr/share/doc/xz/api/globals_type.html
Modified: /usr/share/doc/xz/api/hardware_8h.html
Modified: /usr/share/doc/xz/api/index.html
Modified: /usr/share/doc/xz/api/index_8h.html
Modified: /usr/share/doc/xz/api/index__hash_8h.html
Modified: /usr/share/doc/xz/api/lzma12_8h.html
Modified: /usr/share/doc/xz/api/lzma_8h.html
Modified: /usr/share/doc/xz/api/stream__flags_8h.html
Modified: /usr/share/doc/xz/api/structlzma__allocator.html
Modified: /usr/share/doc/xz/api/structlzma__block.html
Modified: /usr/share/doc/xz/api/structlzma__filter.html
Modified: /usr/share/doc/xz/api/structlzma__index__iter.html
Modified: /usr/share/doc/xz/api/structlzma__mt.html
Modified: /usr/share/doc/xz/api/structlzma__options__bcj.html
Modified: /usr/share/doc/xz/api/structlzma__options__delta.html
Modified: /usr/share/doc/xz/api/structlzma__options__lzma.html
Modified: /usr/share/doc/xz/api/structlzma__stream.html
Modified: /usr/share/doc/xz/api/structlzma__stream__flags.html
Modified: /usr/share/doc/xz/api/version_8h.html
Modified: /usr/share/doc/xz/api/vli_8h.html
Modified: /usr/share/doc/xz/examples/Makefile
Modified: /usr/share/locale/ca/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/cs/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/da/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/de/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/eo/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/es/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/fi/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/fr/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/hr/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/hu/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/it/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/ko/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/pl/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/pt/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/pt_BR/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/ro/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/sr/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/sv/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/tr/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/uk/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/vi/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/zh_CN/LC_MESSAGES/xz.mo
Modified: /usr/share/locale/zh_TW/LC_MESSAGES/xz.mo
Deleted: /usr/lib/liblzma.so.5.6.1
Deleted: /usr/share/doc/xz/COPYING.0BSD
Deleted: /usr/share/doc/xz/api/COPYING.CC-BY-SA-4.0
Deleted: /usr/share/doc/xz/api/xz-logo.png

Package xz-dev: Click to expand/collapse

Package xz-dev:
Added: /usr/share/doc/xz/examples_old/xz_pipe_comp.c
Added: /usr/share/doc/xz/examples_old/xz_pipe_decomp.c
Modified: /usr/include/lzma/base.h
Modified: /usr/include/lzma/bcj.h
Modified: /usr/include/lzma/block.h
Modified: /usr/include/lzma/check.h
Modified: /usr/include/lzma/container.h
Modified: /usr/include/lzma/delta.h
Modified: /usr/include/lzma/filter.h
Modified: /usr/include/lzma/hardware.h
Modified: /usr/include/lzma/index.h
Modified: /usr/include/lzma/index_hash.h
Modified: /usr/include/lzma/lzma12.h
Modified: /usr/include/lzma/stream_flags.h
Modified: /usr/include/lzma/version.h
Modified: /usr/include/lzma/vli.h
Modified: /usr/include/lzma.h
Modified: /usr/lib/liblzma.a
Modified: /usr/lib/pkgconfig/liblzma.pc
Modified: /usr/share/doc/xz/examples/01_compress_easy.c
Modified: /usr/share/doc/xz/examples/02_decompress.c
Modified: /usr/share/doc/xz/examples/03_compress_custom.c
Modified: /usr/share/doc/xz/examples/04_compress_easy_mt.c
Deleted: /usr/share/doc/xz/examples/11_file_info.c

@pdeslaur pdeslaur merged commit 87776eb into main Mar 29, 2024
8 checks passed
@pdeslaur pdeslaur deleted the imjasonh-patch-5 branch March 29, 2024 18:14
@ruppde
Copy link

ruppde commented Mar 29, 2024 •
edited
Loading

let's add the reason for the rollback:
The upstream xz repository and the xz tarballs have been backdoored.
https://www.openwall.com/lists/oss-security/2024/03/29/4

please consider not immediately installing any new version but wait e.g. one month.

This was referenced Nov 21, 2024
Merged
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@smoser smoser smoser left review comments

@pdeslaur pdeslaur pdeslaur approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@imjasonh @ruppde @smoser @pdeslaur