diff options
| author | Robert Marko | 2025-04-21 11:23:20 +0000 |
|---|---|---|
| committer | Robert Marko | 2025-04-22 11:20:05 +0000 |
| commit | 269f251ba6eae8981e3dbc13f355fc1f53b955ba (patch) | |
| tree | b5f42beff3c05df0af9cf9766d7b6b6362537c9a | |
| parent | 5c83301107d238e6c3ea829ae09d87396da0b4db (diff) | |
| download | openwrt-269f251ba6eae8981e3dbc13f355fc1f53b955ba.tar.gz | |
tools: xz: update to 5.8.1
5.8.1 (2025-04-03)
* Multithreaded .xz decoder (lzma_stream_decoder_mt()):
- Fix a bug that could at least result in a crash with
invalid input. (CVE-2025-31115)
- Fix a performance bug: Only one thread was used if the whole
input file was provided at once to lzma_code(), the output
buffer was big enough, timeout was disabled, and LZMA_FINISH
was used. There are no bug reports about this, thus it's
possible that no real-world application was affected.
* Avoid <stdalign.h> even with C11/C17 compilers. This fixes the
build with Oracle Developer Studio 12.6 on Solaris 10 when the
compiler is in C11 mode (the header doesn't exist).
* Autotools: Restore compatibility with GNU make versions older
than 4.0 by creating the package using GNU gettext 0.23.1
infrastructure instead of 0.24.
* Update Croatian translation.
Link: https://github.com/openwrt/openwrt/pull/18558
Signed-off-by: Robert Marko <robimarko@gmail.com>
| -rw-r--r-- | tools/xz/Makefile | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/tools/xz/Makefile b/tools/xz/Makefile index a140b3b7fa..a370408ca0 100644 --- a/tools/xz/Makefile +++ b/tools/xz/Makefile @@ -7,13 +7,13 @@ include $(TOPDIR)/rules.mk PKG_NAME:=xz -PKG_VERSION:=5.8.0 +PKG_VERSION:=5.8.1 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2 PKG_SOURCE_URL:=https://github.com/tukaani-project/xz/releases/download/v$(PKG_VERSION) \ @SF/lzmautils \ http://tukaani.org/xz -PKG_HASH:=8c107270289807e2047f35d687b4d7a5bb029137f7c89ebdcfa909cb3b674440 +PKG_HASH:=5965c692c4c8800cd4b33ce6d0f6ac9ac9d6ab227b17c512b6561bce4f08d47e PKG_CPE_ID:=cpe:/a:tukaani:xz HOST_BUILD_PARALLEL:=1 |