linux/poky.git/meta/recipes-extended/xz, branch scarthgap

xz: ignore CVE-2024-47611

2025-08-22T12:59:54+00:00

According to the NVD entry, it is only applicable when built for native Windows (MinGW-w64 or MSVC). (From OE-Core rev: 04ce4704e603cd66f30ffc001541c6497d84050e) Signed-off-by: Daniel Turull Signed-off-by: Steve Sakoman

xz: patch CVE-2025-31115

2025-04-16T13:41:24+00:00

Cherry-pick commits from [1] linked from [2] from branch v5.4 [1] https://tukaani.org/xz/xz-cve-2025-31115.patch [2] https://tukaani.org/xz/threaded-decoder-early-free.html (From OE-Core rev: 952ea12f08a4e42f787a21fb98adaf4b17d0aee1) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

xz: upgrade 5.4.6 -> 5.4.7

2025-04-16T13:41:24+00:00

License-Update: homepage update in [1] [1] https://github.com/tukaani-project/xz/commit/c5c091332c6953a0ce940cb355ea9e99491429fc (From OE-Core rev: e6565ca37da4821f8e3924fe6bc6a6f4eeedd9a9) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

xz: Update LICENSE variable for xz packages

2024-07-12T12:47:20+00:00

Update LICENSE defined for xz packages to match the license information provided in the xz COPYING file. The License information from PACKAGERS file of xz mentions packages with lzma files are in public domain.They ask to use GPLv2+, if only it's not possible to mention "PD and GPLv2+". Include PD license with GPLv2 to packages with lzma content: xz-dev package contains lzma header xz-doc package contains lzma man pages xz packages contains lzma binaries Links: https://github.com/tukaani-project/xz/blob/v5.4.6/COPYING https://github.com/tukaani-project/xz/blob/v5.4.6/PACKAGERS (From OE-Core rev: d511c41dac048fbdd93a54136e93b0623a18a83d) Signed-off-by: Bhabu Bindu Signed-off-by: Richard Purdie (cherry picked from commit 4e5b955def5d9f305f5aba2c68b73287c03fd163) Signed-off-by: Steve Sakoman

xz: correct upstream version check

2024-03-06T12:13:16+00:00

(From OE-Core rev: 5be69fc3ff6296411c736e5c7c9522d99c0be2c6) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

xz: upgrade 5.4.5 -> 5.4.6

2024-02-16T15:14:26+00:00

Project has made changes to the site structure: https://tukaani.org/ | The XZ projects were moved to their own website on xz.tukaani.org in | January 2024. The old links will be kept working via redirections. While old release tarballs are still being accesible on the site via redirects, new releases are no longer hosted on the site and point directly to github - update SRC_URI. The website change was mentioned in the COPYING file, changing its hash. Full Changelog: https://github.com/tukaani-project/xz/releases/tag/v5.4.6 License-Update: new URL due to website restructure (From OE-Core rev: 9cc6c809c154019afe3bf6e6d617eab640faa4d0) Signed-off-by: Denys Dmytriyenko Signed-off-by: Richard Purdie

xz: remove redundant PTEST_ENABLED conditional

2024-02-13T13:51:41+00:00

There's no need to conditionally include run-ptest in the SRC_URI. (From OE-Core rev: 74bd5ea29c8e2c607e9b982028c103abebcd0b27) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

xz: Add ptest support

2024-01-27T08:20:02+00:00

There are two types of cases: executables and POSIX shell scripts. All test cases PASS. Add xz-ptest to PTESTS_FAST because test duration less than 30s on qemux86-64. root@qemux86-64:~# ptest-runner xz START: ptest-runner 2024-01-26T03:32 BEGIN: /usr/lib/xz/ptest === test_bcj_exact_size.c === PASS: test_exact_size PASS: test_empty_block (From OE-Core rev: 2704983f972e4fe1d4e0bee8491a07eb4f629346) Signed-off-by: Richard Purdie

xz: upgrade 5.4.4 -> 5.4.5

2024-01-19T12:21:23+00:00

Changelog: ============ * Small fixes and improvements to the tests. * Updated translations: Chinese (simplified) and Esperanto. (From OE-Core rev: f65607d86f55d7d3862a7bb321f1d669fd8f4c4b) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

xz: upgrade 5.4.3 -> 5.4.4

2023-09-02T17:23:06+00:00

Changelog: =========== * liblzma and xzdec can now build against WASI SDK when threading support is disabled. xz and tests don't build yet. * CMake: - Fixed a bug preventing other projects from including liblzma multiple times using find_package(). - Don't create broken symlinks in Cygwin and MSYS2 unless supported by the environment. This prevented building for the default MSYS2 environment. The problem was introduced in xz 5.4.0. * Documentation: - Small improvements to man pages. - Small improvements and typo fixes for liblzma API documentation. * Tests: - Added a new section to INSTALL to describe basic test usage and address recent questions about building the tests when cross compiling. - Small fixes and improvements to the tests. * Translations: - Fixed a mistake that caused one of the error messages to not be translated. This only affected versions 5.4.2 and 5.4.3. - Updated the Chinese (simplified), Croatian, Esperanto, German, Korean, Polish, Romanian, Spanish, Swedish, Ukrainian, and Vietnamese translations. - Updated the German, Korean, Romanian, and Ukrainian man page translations. (From OE-Core rev: 1cc37e3f7aca7e04b03de99f9ce4b8068a61510d) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie