xz-5.4.1-150600.3.3.1 < > , a gNp9|]N[J-?
DF*0֬bڇLFE+iϰfjL-S|`(gv4O8Řu ,,h|b5~yŤQ`d&
pB fr" .S_4bXd_lGnQyAɊ/6jpkOBZR7&xIa"wqkد N|f-k6mK(CqA/i~Vp8u3X! > A h ? X d a A W z G G J G
G G ; G
d G G G F d G ( 8 ' 9 ' : i ' B Q F V G l G H G I G X Y Z $ [ ( \ 0 G ] L G ^ b c d e f l u , G v H w , G x H G y d % z T C xz 5.4.1 150600.3.3.1 A Program for Compressing Files with the Lempel–Ziv–Markov algorithm The xz command is a program for compressing files.
* Average compression ratio of LZMA is about 30% better than that of
gzip, and 15% better than that of bzip2.
* Decompression speed is only little slower than that of gzip, being
two to five times faster than bzip2.
* In fast mode, compresses faster than bzip2 with a comparable
compression ratio.
* Achieving the best compression ratios takes four to even twelve
times longer than with bzip2. However, this does not affect
decompressing speed.
* Very similar command line interface to what gzip and bzip2 have. gNs390zl31 CSUSE Linux Enterprise 15 SUSE LLC GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND SUSE-Public-Domain https://www.suse.com/ Productivity/Archiving/Compression https://tukaani.org/xz/ linux s390x 8@ 8@ 8 8@ (] C z G 3
%= " ^ a : (
F
T ) | A큤A큤A큤A큤 gAgBgBgBgBgBgBgAgDgDgBgAgAgDgAgBgDgBgBgBgBgBgBdgDgCgCgCgCgCgCgCgCgCgCgCgCgCgCgCgCgCgCgCgLc c gDgDgDgDgDgDgDgDgDgBgDgDgDgAgDgDgAgBgDgDgBgBgBVB 387992df73685914913b1b54c1854259fa627fe41aee103f2554253bb4b4efe7 1548cf691c62e14369f820f1794a3fbed0a53ff9ca68c78cdff753a4e97906ee da1883c932df6d50649149276a2fb8697e478627aa28f8286d73212f429cacf5 70f4d47f951c1ffae8ea98276afd5723b15dfadfa7551f0e69fdb594076f2e62 140e1379ff766c6a0c823f85fa5ea3b76fb0478ed6e29bc04b2a174d771184ab 701f8ee3e20d93b89adcb352d9b083724cfeea88d353a0ca68bde7530a848d67 8846135df6c52098ecd8f7f9fa669b622594763fbe17413a7fca92e2fd2c0af8 7e37bae12136bd0e06a8bfd3115e55bd28d9f9b76d4095e334d9c2a2d574b3b3 4cd7a438ec3164b1b68e99272bd3d0a8bb1e109fc0d1699fcc540185036d333d 07def6a20ec5430b6ad04cf1286da3f53fbb86cf6d2026119945ccd55d3a2258 e7bb07c88ac593e0f2eedb07cc232c650050a70bd2f1130d271e0290fca37ef6 d9bb3524f723b26294d66728f1d411d1729679e90511538b28d28a00966203e8 6e9ffdb483e1396d4d749216f8d001749c6b822a00e0df0b37452083bb018f6e d3e94ce46e630c9c6f86df16937886ea4cdf021746e5be3e2ad90b52c7726c29 f0ddaa731c89d6028f55281229e56b89f32b8c477aba4f52367488f0f42651be 913af652f6eac0c728762ce5537d3ea175538573df6f34358ce522fc6087c40a 1c8733c08e1edbd727bb623eb23b5505b32a4306e310ee4f9048fc9bf4af8de2 914afd1e3494d9942ef752123f9743fa9427d5a82ca3e593794b9a4d9e390f42 80a5d7e1acd455ffb55bd1ca26f767789171293a231e6645ca991b83b954988c c9ba8b33aa9a9730afbd6ae7e8f91c25b8238df46918ebb9071e48c7c7a10c08 fce7eefb9149c5f5a43869e07a4a576c1f2af4ca0aae6872bd7ca50ed8c85522 5d157c3c397fffc3b0489e49ef1d396fcfe6153f134ec5ea44ef0acc7fe474aa 97ea64c7578870443ff4669cd6dce43d94d857faa7cffef1aa462ff9c8089c07 9d6a0a72822734a0afb1816e07f0a7edab03339119bed4f393c1c7eec884eab6 beda7e9710f03003286d2e99c159e16e727e286e22da6a9bb311e493b80e2725 5bc5f117a497b60e8919f5bb9471ad86fb66a973d536d6522cf629aaa2170fe5 bcb02973ef6e87ea73d331b3a80df7748407f17efdb784b61b47e0e610d3bb5c 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 3f13acdb36653ebf84992e33b71de75075ff782add1934d5c97c9d1cc9fe1a7d c20dc34d1a5c6fba3553408590aa19a961722304c33eadd7aabff2e0cb167c99 a8365cc214524b33516663d4ec174fc56b38826426281bfe6394068947a166a8 6b67e7fced072efd71266ceac02916b7c9cf59e7acc0b1b49d742313f18f38f4 d5b98a475b8c1a232532d36e12cdd4b84d4772069ba27a8b15b482981d88ccce c8d18f6125245e34e40f840f346a55404b3d8910682232a7cd89ac105fe8d112 7f4ad5d4263cbee6dff1787a1e95011be60894cb86495a99331b4d4a6135faac 9d51522433649dc554cc9f2b3c5d8ec3b2e8455a8c297a3d057a79b053a42724 xz xzdiff xzdiff xzgrep xzgrep xzgrep xzless xz xzmore xz xz xz xzdiff xzgrep xzgrep xz.1.gz xzdiff.1.gz xzdiff.1.gz xzgrep.1.gz xzgrep.1.gz xzgrep.1.gz xzless.1.gz xz.1.gz xzdec.1.gz xzmore.1.gz xz.1.gz xz.1.gz xz.1.gz xzdiff.1.gz xzgrep.1.gz xzgrep.1.gz root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root xz-5.4.1-150600.3.3.1.src.rpm lzma xz xz(s390-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.32)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.6)(64bit) libc.so.6(GLIBC_2.7)(64bit) liblzma.so.5()(64bit) liblzma.so.5(XZ_5.0)(64bit) liblzma.so.5(XZ_5.2)(64bit) liblzma.so.5(XZ_5.4)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsBzip2) 3.0.4-1 4.6.0-1 4.0-1 3.0.5-1 4.14.3 g@f @e@dܺ@d.@dxccc@c@cwsc< @c6@b@bUi`
@^r
@]m]D%\@[#@Z@Ycl@YV=@YOYJ_X+XgVV@Vl@VA@V?9@V
}@T\@TT@T@T@Tantonio.teixeira@suse.com dmueller@suse.com danilo.spinella@suse.com dimstar@opensuse.org fcrozat@suse.com mpluskal@suse.com dmueller@suse.com dmueller@suse.com dmueller@suse.com jengelh@inai.de danilo.spinella@suse.com gmbr3@opensuse.org c.j@tuta.io dmueller@suse.com meissner@suse.com jengelh@inai.de info@paolostivanin.com lnussel@suse.de mliska@suse.cz kstreitova@suse.com astieger@suse.com kukuk@suse.de jengelh@inai.de olaf@aepfle.de astieger@suse.com mpluskal@suse.com adrian@suse.de astieger@suse.com mpluskal@suse.com tchvatal@suse.com hpj@urpla.net hpj@urpla.net astieger@suse.com astieger@suse.com rguenther@suse.com andreas.stieger@gmx.de andreas.stieger@gmx.de meissner@suse.com crrodriguez@opensuse.org - Add CVE-2025-31115.patch
* Fix heap use after free and writing to an address based on the null
pointer plus an offset (CVE-2025-31115, bsc#1240414) - revert to 5.4.1, last release from Lasse Collin - Build static library on SLE - xznew: Remove bashsism.
- build: pass CONFIG_SHELL=/bin/sh to configure: the posix tools
are setting the current SHELL as the shebang, which is overkill:
any posix compliant shell, aka /bin/sh, is sufficient. - Update license tag, there is GPL-3.0-or-later code too. - Build AVX2 enabled hwcaps library for x86_64-v3 - update to 5.4.1:
* liblzma:
- Fixed the return value of lzma_microlzma_encoder() if the
LZMA options lc/lp/pb are invalid. Invalid lc/lp/pb options
made the function return LZMA_STREAM_END without encoding
anything instead of returning LZMA_OPTIONS_ERROR.
* Tests:
- Fixed test script compatibility with ancient /bin/sh
versions. Now the five test_compress_* tests should
no longer fail on Solaris 10.
- Added and refactored a few tests.
* Translations:
- Updated the Catalan and Esperanto translations.
- Added Korean and Ukrainian man page translations. - update to 5.4.0:
This bumps the minor version of liblzma because new features were
added. The API and ABI are still backward compatible with liblzma
5.2.x and 5.0.x.
Summary of new features added in the 5.3.x development releases:
* liblzma:
- Added threaded .xz decompressor lzma_stream_decoder_mt().
It can use multiple threads with .xz files that have multiple
Blocks with size information in Block Headers. The threaded
encoder in xz has always created such files.
Single-threaded encoder cannot store the size information in
Block Headers even if one used LZMA_FULL_FLUSH to create
multiple Blocks, so this threaded decoder cannot use multiple
threads with such files.
If there are multiple Streams (concatenated .xz files), one
Stream will be decompressed completely before starting the
next Stream.
- A new decoder flag LZMA_FAIL_FAST was added. It makes the
threaded decompressor report errors soon instead of first
flushing all pending data before the error location.
- New Filter IDs:
* LZMA_FILTER_ARM64 is for ARM64 binaries.
* LZMA_FILTER_LZMA1EXT is for raw LZMA1 streams that don't
necessarily use the end marker.
- Added lzma_str_to_filters(), lzma_str_from_filters(), and
lzma_str_list_filters() to convert a preset or a filter chain
string to a lzma_filter[] and vice versa. These should make
it easier to write applications that allow users to specify
custom compression options.
- Added lzma_filters_free() which can be convenient for freeing
the filter options in a filter chain (an array of lzma_filter
structures).
- lzma_file_info_decoder() to makes it a little easier to get
the Index field from .xz files. This helps in getting the
uncompressed file size but an easy-to-use random access
API is still missing which has existed in XZ for Java for
a long time.
- Added lzma_microlzma_encoder() and lzma_microlzma_decoder().
It is used by erofs-utils and may be used by others too.
The MicroLZMA format is a raw LZMA stream (without end marker)
whose first byte (always 0x00) has been replaced with
bitwise-negation of the LZMA properties (lc/lp/pb). It was
created for use in EROFS but may be used in other contexts
as well where it is important to avoid wasting bytes for
stream headers or footers. The format is also supported by
XZ Embedded (the XZ Embedded version in Linux got MicroLZMA
support in Linux 5.16).
The MicroLZMA encoder API in liblzma can compress into a
fixed-sized output buffer so that as much data is compressed
as can be fit into the buffer while still creating a valid
MicroLZMA stream. This is needed for EROFS.
- Added lzma_lzip_decoder() to decompress the .lz (lzip) file
format version 0 and the original unextended version 1 files.
Also lzma_auto_decoder() supports .lz files.
- lzma_filters_update() can now be used with the multi-threaded
encoder (lzma_stream_encoder_mt()) to change the filter chain
after LZMA_FULL_BARRIER or LZMA_FULL_FLUSH.
- In lzma_options_lzma, allow nice_len = 2 and 3 with the match
finders that require at least 3 or 4. Now it is internally
rounded up if needed.
- CLMUL-based CRC64 on x86-64 and E2K with runtime processor
detection. On 32-bit x86 it currently isn't available unless
- -disable-assembler is used which can make the non-CLMUL
CRC64 slower; this might be fixed in the future.
- Building with --disable-threads --enable-small
is now thread-safe if the compiler supports
__attribute__((__constructor__)).
* xz:
- Using -T0 (--threads=0) will now use multi-threaded encoder
even on a single-core system. This is to ensure that output
from the same xz binary is identical on both single-core and
multi-core systems.
- --threads=+1 or -T+1 is now a way to put xz into
multi-threaded mode while using only one worker thread.
The + is ignored if the number is not 1.
- A default soft memory usage limit is now used for compression
when -T0 is used and no explicit limit has been specified.
This soft limit is used to restrict the number of threads
but if the limit is exceeded with even one thread then xz
will continue with one thread using the multi-threaded
encoder and this limit is ignored. If the number of threads
is specified manually then no default limit will be used;
this affects only -T0.
This change helps on systems that have very many cores and
using all of them for xz makes no sense. Previously xz -T0
could run out of memory on such systems because it attempted
to reserve memory for too many threads.
This also helps with 32-bit builds which don't have a large
amount of address space that would be required for many
threads. The default soft limit for -T0 is at most 1400 MiB
on all 32-bit platforms.
- Previously a low value in --memlimit-compress wouldn't cause
xz to switch from multi-threaded mode to single-threaded mode
if the limit cannot otherwise be met; xz failed instead. Now
xz can switch to single-threaded mode and then, if needed,
scale down the LZMA2 dictionary size too just like it already
did when it was started in single-threaded mode.
- The option --no-adjust no longer prevents xz from scaling down
the number of threads as that doesn't affect the compressed
output (only performance). Now --no-adjust only prevents
adjustments that affect compressed output, that is, with
- -no-adjust xz won't switch from multi-threaded mode to
single-threaded mode and won't scale down the LZMA2
dictionary size.
- Added a new option --memlimit-mt-decompress=LIMIT. This is
used to limit the number of decompressor threads (possibly
falling back to single-threaded mode) but it will never make
xz refuse to decompress a file. This has a system-specific
default value because without any limit xz could end up
allocating memory for the whole compressed input file, the
whole uncompressed output file, multiple thread-specific
decompressor instances and so on. Basically xz could
attempt to use an insane amount of memory even with fairly
common files. The system-specific default value is currently
the same as the one used for compression with -T0.
The new option works together with the existing option
- -memlimit-decompress=LIMIT. The old option sets a hard limit
that must not be exceeded (xz will refuse to decompress)
while the new option only restricts the number of threads.
If the limit set with --memlimit-mt-decompress is greater
than the limit set with --memlimit-compress, then the latter
value is used also for --memlimit-mt-decompress.
- Added new information to the output of xz --info-memory and
new fields to the output of xz --robot --info-memory.
- In --lzma2=nice=NUMBER allow 2 and 3 with all match finders
now that liblzma handles it.
- Don't mention endianness for ARM and ARM-Thumb filters in
- -long-help. The filters only work for little endian
instruction encoding but modern ARM processors using
big endian data access still use little endian
instruction encoding. So the help text was misleading.
In contrast, the PowerPC filter is only for big endian
32/64-bit PowerPC code. Little endian PowerPC would need
a separate filter.
- Added decompression support for the .lz (lzip) file format
version 0 and the original unextended version 1. It is
autodetected by default. See also the option --format on
the xz man page.
- Sandboxing enabled by default:
* Capsicum (FreeBSD)
* pledge(2) (OpenBSD)
* Scripts now support the .lz format using xz.
* A few new tests were added.
* The liblzma-specific tests are now supported in CMake-based
builds too ("make test"). - update to 5.2.10:
* xz: Don't modify argv[] when parsing the --memlimit* and
- -block-list command line options. This fixes confusing
arguments in process listing (like "ps auxf").
* GNU/Linux only: Use __has_attribute(__symver__) to detect if
that attribute is supported. This fixes build on Mandriva where
Clang is patched to define __GNUC__ to 11 by default (instead
of 4 as used by Clang upstream).
* liblzma:
- Fixed an infinite loop in LZMA encoder initialization
if dict_size >= 2 GiB.
- Fixed two cases of invalid free() that can happen if
a tiny allocation fails in encoder re-initialization
or in lzma_filters_update(). These bugs had some
similarities with the bug fixed in 5.2.7.
- Fixed lzma_block_encoder() not allowing the use of
LZMA_SYNC_FLUSH with lzma_code() even though it was
documented to be supported. The sync-flush code in
the Block encoder was already used internally via
lzma_stream_encoder(), so this was just a missing flag
in the lzma_block_encoder() API function.
- GNU/Linux only: Don't put symbol versions into static
liblzma as it breaks things in some cases (and even if
it didn't break anything, symbol versions in static
libraries are useless anyway). The downside of the fix
is that if the configure options --with-pic or --without-pic
are used then it's not possible to build both shared and
static liblzma at the same time on GNU/Linux anymore;
with those options --disable-static or --disable-shared
must be used too.
- drop unused xz-devel-static which is no longer supported when using
- -with-pic (which is needed for shared libs) - Rename xz-static-devel -> xz-devel-static to follow the general
naming used in openSUSE. - Update to 5.2.8:
* xz:
- If xz cannot remove an input file when it should, this
is now treated as a warning (exit status 2) instead of
an error (exit status 1). This matches GNU gzip and it
is more logical as at that point the output file has
already been successfully closed.
- Fix handling of .xz files with an unsupported check type.
Previously such printed a warning message but then xz
behaved as if an error had occurred (didn't decompress,
exit status 1). Now a warning is printed, decompression
is done anyway, and exit status is 2. This used to work
slightly before 5.0.0. In practice this bug matters only
if xz has been built with some check types disabled. As
instructed in PACKAGERS, such builds should be done in
special situations only.
- Fix "xz -dc --single-stream tests/files/good-0-empty.xz"
which failed with "Internal error (bug)". That is,
- -single-stream was broken if the first .xz stream in
the input file didn't contain any uncompressed data.
- Fix displaying file sizes in the progress indicator when
working in passthru mode and there are multiple input files.
Just like "gzip -cdf", "xz -cdf" works like "cat" when the
input file isn't a supported compressed file format. In
this case the file size counters weren't reset between
files so with multiple input files the progress indicator
displayed an incorrect (too large) value.
* liblzma:
- API docs in lzma/container.h:
* Update the list of decoder flags in the decoder
function docs.
* Explain LZMA_CONCATENATED behavior with .lzma files
in lzma_auto_decoder() docs.
- OpenBSD: Use HW_NCPUONLINE to detect the number of
available hardware threads in lzma_physmem().
- Fix use of wrong macro to detect x86 SSE2 support.
__SSE2_MATH__ was used with GCC/Clang but the correct
one is __SSE2__. The first one means that SSE2 is used
for floating point math which is irrelevant here.
The affected SSE2 code isn't used on x86-64 so this affects
only 32-bit x86 builds that use -msse2 without -mfpmath=sse
(there is no runtime detection for SSE2). It improves LZMA
compression speed (not decompression).
- Fix the build with Intel C compiler 2021 (ICC, not ICX)
on Linux. It defines __GNUC__ to 10 but doesn't support
the __symver__ attribute introduced in GCC 10.
* Scripts: Ignore warnings from xz by using --quiet --no-warn.
This is needed if the input .xz files use an unsupported
check type.
* Translations:
- Updated Croatian and Turkish translations.
- One new translations wasn't included because it needed
technical fixes. It will be in upcoming 5.4.0. No new
translations will be added to the 5.2.x branch anymore.
- Renamed the French man page translation file from
fr_FR.po to fr.po and thus also its install directory
(like /usr/share/man/fr_FR -> .../fr).
- Man page translations for upcoming 5.4.0 are now handled
in the Translation Project.
* Update doc/faq.txt a little so it's less out-of-date. - Move localised man pages to lang subpackage - update to 5.2.7:
* liblzma:
- Add API doc note about the .xz decoder LZMA_MEMLIMIT_ERROR bug.
- Add dest and src NULL checks to lzma_index_cat.
The documentation states LZMA_PROG_ERROR can be returned from
lzma_index_cat. Previously, lzma_index_cat could not return
LZMA_PROG_ERROR. Now, the validation is similar to
lzma_index_append, which does a NULL check on the index
parameter.
- Fix copying of check type statistics in lzma_index_cat().
The check type of the last Stream in dest was never copied to
dest->checks (the code tried to copy it but it was done too late).
This meant that the value returned by lzma_index_checks() would
only include the check type of the last Stream when multiple
lzma_indexes had been concatenated.
In xz --list this meant that the summary would only list the
check type of the last Stream, so in this sense this was only
a visual bug. However, it's possible that some applications
use this information for purposes other than merely showing
it to the users in an informational message. I'm not aware of
such applications though and it's quite possible that such
applications don't exist.
Regular streamed decompression in xz or any other application
doesn't use lzma_index_cat() and so this bug cannot affect them.
- Stream decoder: Fix restarting after LZMA_MEMLIMIT_ERROR.
If lzma_code() returns LZMA_MEMLIMIT_ERROR it is now possible
to use lzma_memlimit_set() to increase the limit and continue
decoding. This was supposed to work from the beginning but
there was a bug. With other decoders (.lzma or threaded .xz)
this already worked correctly.
- lzma_filters_copy: Keep dest[] unmodified if an error occurs.
lzma_stream_encoder() and lzma_stream_encoder_mt() always assumed
this. Before this patch, failing lzma_filters_copy() could result
in free(invalid_pointer) or invalid memory reads in stream_encoder.c
or stream_encoder_mt.c.
To trigger this, allocating memory for a filter options structure
has to fail. These are tiny allocations so in practice they very
rarely fail.
Certain badness in the filter chain array could also make
lzma_filters_copy() fail but both stream_encoder.c and
stream_encoder_mt.c validate the filter chain before
trying to copy it, so the crash cannot occur this way.
- lzma_index_append: Add missing integer overflow check.
The documentation in src/liblzma/api/lzma/index.h suggests that
both the unpadded (compressed) size and the uncompressed size
are checked for overflow, but only the unpadded size was checked.
The uncompressed check is done first since that is more likely to
occur than the unpadded or index field size overflows.
- Vaccinate against an ill patch from RHEL/CentOS 7.
* xzgrep:
- Fix compatibility with old shells.
Turns out that some old shells don't like apostrophes (') inside
command substitutions. The problem was introduced by commits
69d1b3fc29677af8ade8dc15dba83f0589cb63d6 (2022-03-29),
bd7b290f3fe4faeceb7d3497ed9bf2e6ed5e7dc5 (2022-07-18), and
a648978b20495b7aa4a8b029c5a810b5ad9d08ff (2022-07-19).
5.2.6 is the only stable release that included
this problem.
* Translations: Add Turkish translation. - update to 5.2.6 (CVE-2022-1271, bsc#1198062):
* xz:
- The --keep option now accepts symlinks, hardlinks, and
setuid, setgid, and sticky files.
- When copying metadata from the source file to the destination
file, don't try to set the group (GID) if it is already set
correctly. This avoids a failure on OpenBSD (and possibly on
a few other OSes) where files may get created so that their
group doesn't belong to the user, and fchown(2) can fail even
if it needs to do nothing.
- Cap --memlimit-compress to 2000 MiB instead of 4020 MiB on
MIPS32 because on MIPS32 userspace processes are limited
to 2 GiB of address space.
* liblzma:
- Fixed a missing error-check in the threaded encoder. If a
small memory allocation fails, a .xz file with an invalid
Index field would be created. Decompressing such a file would
produce the correct output but result in an error at the end.
Thus this is a "mild" data corruption bug. Note that while
a failed memory allocation can trigger the bug, it cannot
cause invalid memory access.
- The decoder for .lzma files now supports files that have
uncompressed size stored in the header and still use the
end of payload marker (end of stream marker) at the end
of the LZMA stream. Such files are rare but, according to
the documentation in LZMA SDK, they are valid.
doc/lzma-file-format.txt was updated too.
- Improved 32-bit x86 assembly files:
* Support Intel Control-flow Enforcement Technology (CET)
* Use non-executable stack on FreeBSD.
* xzgrep:
- Fixed arbitrary command injection via a malicious filename
(CVE-2022-1271, ZDI-CAN-16587). A standalone patch for
this was released to the public on 2022-04-07. A slight
robustness improvement has been made since then and, if
using GNU or *BSD grep, a new faster method is now used
that doesn't use the old sed-based construct at all. This
also fixes bad output with GNU grep >= 3.5 (2020-09-27)
when xzgrepping binary files.
- Fixed detection of corrupt .bz2 files.
- Improved error handling to fix exit status in some situations
and to fix handling of signals: in some situations a signal
didn't make xzgrep exit when it clearly should have. It's
possible that the signal handling still isn't quite perfect
but hopefully it's good enough.
- Documented exit statuses on the man page.
- xzegrep and xzfgrep now use "grep -E" and "grep -F" instead
of the deprecated egrep and fgrep commands.
- Fixed parsing of the options -E, -F, -G, -P, and -X. The
problem occurred when multiple options were specied in
a single argument, for example,
echo foo | xzgrep -Fe foo
treated foo as a filename because -Fe wasn't correctly
split into -F -e.
- Added zstd support.
* xzdiff/xzcmp:
- Fixed wrong exit status. Exit status could be 2 when the
correct value is 1.
- Documented on the man page that exit status of 2 is used
for decompression errors.
- Added zstd support.
* xzless:
- Fix less(1) version detection. It failed if the version number
from "less -V" contained a dot. - use https urls. - Upgrade old rpm constructs. - Update to 5.2.5:
* liblzma:
- Fixed several C99/C11 conformance bugs. Now the code is clean
under gcc/clang -fsanitize=undefined. Some of these changes
might have a negative effect on performance with old GCC
versions or compilers other than GCC and Clang. The configure
option --enable-unsafe-type-punning can be used to (mostly)
restore the old behavior but it shouldn't normally be used.
- Improved API documentation of lzma_properties_decode().
- Added a very minor encoder speed optimization.
* xz:
- Fixed a crash in "xz -dcfv not_an_xz_file". All four options
were required to trigger it. The crash occurred in the
progress indicator code when xz was in passthru mode where
xz works like "cat".
- Fixed an integer overflow with 32-bit off_t. It could happen
when decompressing a file that has a long run of zero bytes
which xz would try to write as a sparse file. Since the build
system enables large file support by default, off_t is
normally 64-bit even on 32-bit systems.
- Fixes for --flush-timeout:
* Fix semi-busy-waiting.
* Avoid unneeded flushes when no new input has arrived
since the previous flush was completed.
- Added a special case for 32-bit xz: If --memlimit-compress is
used to specify a limit that exceeds 4020 MiB, the limit will
be set to 4020 MiB. The values "0" and "max" aren't affected
by this and neither is decompression. This hack can be
helpful when a 32-bit xz has access to 4 GiB address space
but the specified memlimit exceeds 4 GiB. This can happen
e.g. with some scripts.
- Capsicum sandbox is now enabled by default where available
(FreeBSD >= 10). The sandbox debug messages (xz -vv) were
removed since they seemed to be more annoying than useful. - Do not recommend lang package. The lang package already has a supplements. - Use FAT LTO objects in order to provide proper static library. - add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
xz, xzdec, lzmadec, documentation, translated messages, tests,
debug, extra directory) are in public domain licence [bsc#1135709] - xz 5.2.4:
* liblzma:
- Allow 0 as memory usage limit instead of returning
LZMA_PROG_ERROR. Now 0 is treated as if 1 byte was specified,
which effectively is the same as 0.
- Use "noexcept" keyword instead of "throw()" in the public
headers when a C++11 (or newer standard) compiler is used.
- Added a portability fix for recent Intel C Compilers.
* xz:
- Fix "xz --list --robot missing_or_bad_file.xz" which would
try to print an unitialized string and thus produce garbage
output. Since the exit status is non-zero, most uses of such
a command won't try to interpret the garbage output.
- "xz --list foo.xz" could print "Internal error (bug)" in a
corner case where a specific memory usage limit had been set. - Use %license instead of %doc [bsc#1082318] - % needs to be encoded in description; adjust weird indent there
as well. Expand LZMA in summaries. - Really use the selfdefined CFLAGS during build to fix build - fix CentOS/RHEL builds after clean-up - Simplify spec file conditions
- Clenup profiled building
- Use full lists of files - enable static package by default.
Needed for AppImageKit - xz 5.2.3:
* xz: always close a file before trying to delete it to avoid
problems on some operating system and file system combinations.
* C99/C11 conformance fixes to liblzma. The issues affected at
least some builds using link-time optimizations.
* Fixed bugs in the rarely-used function lzma_index_dup().
* Use of external SHA-256 code is now disabled by default.
It can still be enabled by passing --enable-external-sha256
* Changed CPU core count detection to use sched_getaffinity() on
GNU/Linux and GNU/kFreeBSD.
* Fixes to the build-system - Install xznew with correct permissions (boo#970842) - Do not split out lang_package conditional, used in sle10 out of support - fix conversion: spell the missed parts correctly - add xznew{,.1}, converted from bznew - xz 5.2.2:
* Omitted the use of pipe2() even if it is available to avoid
portability issues with some old Linux and glibc combinations
* Updated German translation
* Documented that threaded decompression is not implemented yet - xz 5.2.1:
* Fixed a compression-ratio regression in fast mode of LZMA1 and
LZMA2. - Avoid running configure twice and using -fprofile-generate or
- fprofile-use for compiling configure tests when profiling. - xz 5.2.0:
* liblzma:
- Added support for multi-threaded compression
- Made the uses of lzma_allocator const correct.
- Added lzma_block_uncomp_encode() to create uncompressed
.xz Blocks using LZMA2 uncompressed chunks.
- Added support for LZMA_IGNORE_CHECK.
- A few speed optimizations were made.
- Added support for symbol versioning. It is enabled by default
on GNU/Linux, other GNU-based systems, and FreeBSD.
* xz:
- Fixed a race condition in the signal handling
- Multi-threaded decompression can be enabled with the
- -threads (-T) option.
- New command line options in xz: --single-stream,
- -block-size=SIZE, --block-list=SIZES,
- -flush-timeout=TIMEOUT, and --ignore-check.
- xz -lvv now shows the minimum xz version that is required to
decompress the file. Currently it is 5.0.0 for all supported
.xz files except files with empty LZMA2 streams require 5.0.2.
* xzdiff and xzgrep now support .lzo files if lzop is installed.
The .tzo suffix is also recognized as a shorthand for .tar.lzo. - xz 5.0.8:
* Fixed an old bug in xzgrep that affected OpenBSD and probably
a few other operating systems too.
* Updated French and German translations.
* Minor build system update - build with PIE support. - Build XZ with full RELRO. lzma s390zl31 1743576142
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G 5.4.1 5.4.1-150600.3.3.1 5.4.1-150600.3.3.1 5.4.1 lzcat lzcmp lzdiff lzegrep lzfgrep lzgrep lzless lzma lzmadec lzmainfo lzmore unlzma unxz xz xzcat xzcmp xzdec xzdiff xzegrep xzfgrep xzgrep xzless xzmore xznew xz AUTHORS NEWS README THANKS TODO examples 00_README.txt 01_compress_easy.c 02_decompress.c 03_compress_custom.c 04_compress_easy_mt.c Makefile examples_old xz_pipe_comp.c xz_pipe_decomp.c faq.txt history.txt lzma-file-format.txt xz-file-format.txt xz COPYING COPYING.GPLv2 lzcat.1.gz lzcmp.1.gz lzdiff.1.gz lzegrep.1.gz lzfgrep.1.gz lzgrep.1.gz lzless.1.gz lzma.1.gz lzmadec.1.gz lzmainfo.1.gz lzmore.1.gz unlzma.1.gz unxz.1.gz xz.1.gz xzcat.1.gz xzcmp.1.gz xzdec.1.gz xzdiff.1.gz xzegrep.1.gz xzfgrep.1.gz xzgrep.1.gz xzless.1.gz xzmore.1.gz xznew.1.gz /usr/bin/ /usr/share/doc/packages/ /usr/share/doc/packages/xz/ /usr/share/doc/packages/xz/examples/ /usr/share/doc/packages/xz/examples_old/ /usr/share/licenses/ /usr/share/licenses/xz/ /usr/share/man/man1/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:38155/SUSE_SLE-15-SP6_Update/fe1e56a8f8b77fee0738dd3d94791fdb-xz.SUSE_SLE-15-SP6_Update drpm bzip2 9 s390x-suse-linux
ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=de357543722c52839c9c9357a3555e6925b7ad19, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=48bdbe7668d6313cb2caea7a89c3a88c22878d7d, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=2faa3ccfe8698e2a5baf9f0e97358a9fc9456894, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=9d6d4faf68e2cc396ac57e996a3966efc36814c6, stripped POSIX shell script, ASCII text executable directory UTF-8 Unicode text ASCII text C source, ASCII text makefile script, ASCII text troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) ! " # $ R R R R R R R R R R R R R R R R R
R R R R R R
R R R R R R R R R R R R R R (iS1 utf-8 381256f44ba6caccf74cbec1f7fa4bc8bcae583154e1ba53fbc1dd8d44645407 ? BZh91AY&SY@M ^1뷺eFqU#ODѵ2iP
1CF4 ԏ)f4 hPѣzO@4M ѐ hċ!}qߣD ƊE,=5+YZUKЧe ͚̺xйR%C r7 m|Bc,EcMm U 24̚Z?:(*7%>%0Wm'25890WkM7,ALl(
tDbSS Ak#01$TZM>+Γo-EpB: ؍|sҳ)=`1VƬ*%(8
Ғy MBxۣ$9=w{3]}WQ
\Zā8{0AA4rO
XQ@ve e@_Y]OP1KX{LG_e%P~ {9K$`v>6xx
Tˢ(ý[@0˭bƊqxJ1FW=4ިgPGsdڶ*.)鲟b^"vSC/hRM$r([ yD}\~˯BU, *4-Ax ~nU
Y) b>фD2ӮCJ /l ^MM0\ YھTơ.cKj}xg㚅d,>A<-GDE# kz%:ԡjgY~*2]QSį܌>k
:4C@$l.ΣYLm$b;p+BH,(",/]dMt$y
'm< ݁鲯ΗWRrɛ gc:> l Ø+K$͉<@If$. WK|u_IʞߎnA2A]M +E-~s;)۰=;*Ρ9rg@V.%hr\l!fVKjWYW,ؔIBOd}l "k0a%l
8m$ۀ +rtLc@!EŃLd |'?H
`