Skip to content

Commit e0de928

Browse files
committed
xz: update and regen files
5.4.1 -> 5.6.4 regenerate/delete files (this would have detected the infamous xz backdoor)
1 parent 01257b3 commit e0de928

File tree

6 files changed

+61
-23
lines changed

6 files changed

+61
-23
lines changed

steps/SHA256SUMS.pkgs

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -125,5 +125,5 @@ d4fe9460ca561fc2f546f9730f19f541b17dac0bcc42eb190abba856588c3593 tcc-0.9.27_3.t
125125
b34002b84a9ff4a719301a1b78f960e8039996ad321daf8aa3b2990f50933e48 texinfo-6.7_0.tar.bz2
126126
eccc75a240729327a3210bdc87b35293be8413623a98d0af1f62c01f574acaf6 util-linux-2.19.1_0.tar.bz2
127127
a0b6dd21894593b2ebcbfc9f62b1bd0205bba9e593442e307f02300964248550 which-2.21_0.tar.bz2
128-
4e775a6b9e31941c7a9cb2012d16fabb353659134f640688a82690e21fa9a120 xz-5.4.1_0.tar.bz2
128+
ebf9fa677485cd22d5f97ee41edd54525317b95c9e627481018b46baa0ad5c41 xz-5.6.4_0.tar.bz2
129129
ca8ec9876a7334f5f87e1159e0efe343b8b497ffb0dea8b548223035ecd67f9e zlib-1.2.13_0.tar.bz2

steps/manifest

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -141,7 +141,7 @@ build: curl-8.5.0
141141
improve: get_network ( CHROOT == False )
142142
build: bash-5.2.15
143143
improve: open_console ( CONSOLES == True )
144-
build: xz-5.4.1
144+
build: xz-5.6.4
145145
build: file-5.44
146146
build: libtool-2.4.7
147147
build: tar-1.34

steps/xz-5.4.1/pass1.sh

Lines changed: 0 additions & 20 deletions
This file was deleted.

steps/xz-5.4.1/sources

Lines changed: 0 additions & 1 deletion
This file was deleted.

steps/xz-5.6.4/pass1.sh

Lines changed: 58 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,58 @@
1+
# SPDX-FileCopyrightText: 2021 Andrius Štikonas <[email protected]>
2+
# SPDX-FileCopyrightText: 2025 fosslinux <[email protected]>
3+
#
4+
# SPDX-License-Identifier: GPL-3.0-or-later
5+
6+
# sources note: Unfortunately, xz's xz tarballs use SHA-256 checksum, which
7+
# is not widely supported (including by xz), so we use bz2 tarball instead.
8+
9+
src_prepare() {
10+
# Delete translation catalogs
11+
rm po/*.gmo
12+
13+
# Delete generated documentation
14+
rm -rf po4a/man
15+
16+
# Would have detected the xz backdoor
17+
rm tests/files/*.{x,l}z
18+
19+
# Regenerate these c files/headers
20+
rm src/liblzma/rangecoder/price_table.c src/liblzma/lzma/fastpos_table.c \
21+
src/liblzma/lz/lz_encoder_hash_table.h \
22+
src/liblzma/check/crc{32,64}_table_*.h
23+
24+
pushd src/liblzma/rangecoder
25+
gcc -std=c99 -o price_tablegen price_tablegen.c
26+
./price_tablegen > price_table.c
27+
popd
28+
29+
pushd src/liblzma/lzma
30+
gcc -std=c99 -o fastpos_tablegen fastpos_tablegen.c
31+
./fastpos_tablegen > fastpos_table.c
32+
popd
33+
34+
pushd src/liblzma/check
35+
gcc -std=c99 -o crc32_tablegen_le crc32_tablegen.c
36+
./crc32_tablegen_le > crc32_table_le.h
37+
gcc -std=c99 -DWORDS_BIGENDIAN -o crc32_tablegen_be crc32_tablegen.c
38+
./crc32_tablegen_be > crc32_table_be.h
39+
gcc -std=c99 -DLZ_HASH_TABLE -o crc32_tablegen_hashtable crc32_tablegen.c
40+
./crc32_tablegen_hashtable > ../lz/lz_encoder_hash_table.h
41+
42+
gcc -std=c99 -o crc64_tablegen_le crc64_tablegen.c
43+
./crc64_tablegen_le > crc64_table_le.h
44+
gcc -std=c99 -DWORDS_BIGENDIAN -o crc64_tablegen_be crc64_tablegen.c
45+
./crc64_tablegen_be > crc64_table_be.h
46+
popd
47+
48+
AUTOMAKE=automake-1.15 ACLOCAL=aclocal-1.15 AUTOCONF=autoconf-2.69 AUTOM4TE=autom4te-2.69 autoreconf-2.69 -f
49+
}
50+
51+
src_configure() {
52+
./configure \
53+
--prefix="${PREFIX}" \
54+
--disable-shared \
55+
--disable-nls \
56+
--build=i386-unknown-linux-musl \
57+
--libdir="${LIBDIR}"
58+
}

steps/xz-5.6.4/sources

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
https://github.com/tukaani-project/xz/releases/download/v5.6.4/xz-5.6.4.tar.bz2 176d510c30d80a23b8050bbc048f2ecaacb823ae48b6821727ed6591f0df9200

0 commit comments

Comments
 (0)