packages/utils/xz/Makefile, branch master

xz: drop relative-pkg-config-paths patch for a SED

2026-10-07T06:36:46Z

liblzma.pc is generated by a make rule that expands $(libdir) and $(includedir) to absolute paths, which OpenWrt's pkg-config wrapper cannot redirect at the staging directory. Rewrite the staged copy with SED instead of patching the template, as ~50 other packages here do. Signed-off-by: Alexandru Ardelean

xz: use --enable-small only on SMALL_FLASH targets

2026-10-05T07:04:46Z

--enable-small builds only the resumable mode of the LZMA decoder and a single-table CRC32/CRC64 without the architecture-specific CRC code. Keep it for SMALL_FLASH targets and build the fast variants elsewhere. xz -dc -T1 of a 32 MiB file (3.3 MiB .xz), median of 5: 966 -> 880 ms on Cortex-A53, 813 -> 634 ms on Cortex-A72 in AArch32. liblzma grows by 11.5 KiB (aarch64) to 19.6 KiB (mips_24kc), compressed with xz. Assisted-by: Claude:claude-opus-5-5 Signed-off-by: Julius Bairaktaris

xz: update to 5.8.4

2026-09-28T08:10:45Z

Fixes GHSA-5qpq-xqfv-j9pg: after a failed memory allocation, reinitializing an existing .lzma, .lz or MicroLZMA decoder to decode a different file could access invalid memory and at least crash. It affects all XZ Utils versions since 5.0.0. The release also fixes a wrong error code in lzma_stream_buffer_decode() and a slowdown of lzma_index_cat() with crafted files that made "xz --list" appear to hang. Release notes: https://github.com/tukaani-project/xz/releases/tag/v5.8.4 Signed-off-by: Josef Schlehofer

xz: use correct SPDX license name

2026-07-23T05:28:58Z

The value 'Public-Domain' is not a correct SPDX identifier so remove them. In addition, the SPDX license GPL-2.0 is still missing, which is hereby corrected. Signed-off-by: Florian Eckert

treewide: set me where PKG_MAINTAINER empty

2026-04-16T18:48:36Z

Seems a lot of packages are just getting abandoned by people. Will pick these up and see them through. Signed-off-by: Alexandru Ardelean

xz: update to 5.8.3

2026-04-15T08:40:52Z

Update includes fix for CVE-2026-34743. Release Notes: https://github.com/tukaani-project/xz/releases/tag/v5.8.3 Signed-off-by: Hannu Nyman

xz: update to 5.8.2

2026-01-31T15:59:01Z

Update xz to version 5.8.2 to match version in build tools. Signed-off-by: Hannu Nyman

xz: update to 5.8.1

2025-07-28T06:31:33Z

Update xz to match the version in tools/ Also add a new GitHub package URL. Signed-off-by: Fengyu Wu

utils/xz: fix license

2024-10-06T20:12:43Z

Remove GPL-2.0+ and GPL-3.0+ from PKG_LICENSE as GNU GPLv2+ and GPLv3+ are only used for the build system as stated in [1]: The build system contains public domain files, and files that are under GNU GPLv2+ or GNU GPLv3+. None of these files end up in the binaries being built. Moreover, add 0BSD which is used since version 5.6.0 [2] [1]: https://github.com/tukaani-project/xz/commit/02ddf09bc3079b3e17297729b9e43f14d407b8fc [2]: https://github.com/tukaani-project/xz/commit/689e0228baeb95232430e90d628379db89583d71 Fixes: b9e87eeb7deb8b3890415b835c9c69764893c023 (xz: import from old packages feed) Signed-off-by: Fabrice Fontaine

xz: add patch from upstream to fix mips64/octeon build

2024-08-01T13:30:32Z

Fixes https://github.com/openwrt/packages/issues/24699 Signed-off-by: Aleksey Vasilenko