CVS commit: pkgsrc/archivers/xz

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Apr  3 16:20:32 UTC 2025

Modified Files:
        pkgsrc/archivers/xz: Makefile distinfo

Log Message:
xz: updated to 5.8.1

5.8.1 (2025-04-03)

IMPORTANT: This includes a security fix for CVE-2025-31115 which
affects XZ Utils from 5.3.3alpha to 5.8.0. No new 5.4.x or 5.6.x
releases will be made, but the fix is in the v5.4 and v5.6 branches
in the xz Git repository. A standalone patch for all affected
versions is available as well.

* Multithreaded .xz decoder (lzma_stream_decoder_mt()):

    - Fix a bug that could at least result in a crash with
      invalid input. (CVE-2025-31115)

    - Fix a performance bug: Only one thread was used if the whole
      input file was provided at once to lzma_code(), the output
      buffer was big enough, timeout was disabled, and LZMA_FINISH
      was used. There are no bug reports about this, thus it's
      possible that no real-world application was affected.

* Avoid <stdalign.h> even with C11/C17 compilers. This fixes the
  build with Oracle Developer Studio 12.6 on Solaris 10 when the
  compiler is in C11 mode (the header doesn't exist).

* Autotools: Restore compatibility with GNU make versions older
  than 4.0 by creating the package using GNU gettext 0.23.1
  infrastructure instead of 0.24.

* Update Croatian translation.


To generate a diff of this commit:
cvs rdiff -u -r1.53 -r1.54 pkgsrc/archivers/xz/Makefile
cvs rdiff -u -r1.40 -r1.41 pkgsrc/archivers/xz/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/archivers/xz/Makefile
diff -u pkgsrc/archivers/xz/Makefile:1.53 pkgsrc/archivers/xz/Makefile:1.54
--- pkgsrc/archivers/xz/Makefile:1.53   Sun Mar 30 06:13:16 2025
+++ pkgsrc/archivers/xz/Makefile        Thu Apr  3 16:20:32 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.53 2025/03/30 06:13:16 adam Exp $
+# $NetBSD: Makefile,v 1.54 2025/04/03 16:20:32 adam Exp $
 
-DISTNAME=      xz-5.8.0
+DISTNAME=      xz-5.8.1
 CATEGORIES=    archivers
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=tukaani-project/}
 GITHUB_RELEASE=        v${PKGVERSION_NOREV}

Index: pkgsrc/archivers/xz/distinfo
diff -u pkgsrc/archivers/xz/distinfo:1.40 pkgsrc/archivers/xz/distinfo:1.41
--- pkgsrc/archivers/xz/distinfo:1.40   Sun Mar 30 06:13:16 2025
+++ pkgsrc/archivers/xz/distinfo        Thu Apr  3 16:20:32 2025
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.40 2025/03/30 06:13:16 adam Exp $
+$NetBSD: distinfo,v 1.41 2025/04/03 16:20:32 adam Exp $
 
-BLAKE2s (xz-5.8.0.tar.bz2) = 1caac3f5b3f8eb7ba2d40b3f014f664fca2d4fa5b9fe3b96c42372753b1be63c
-SHA512 (xz-5.8.0.tar.bz2) = 3c63f6b5733c5e162d778ebc079e26ab4653f04dab1b0ebf413022ab440fada2cc191349109e2f97f75b8072aa4720964340373a0d20fbec6aef4822af90c64e
-Size (xz-5.8.0.tar.bz2) = 1894017 bytes
+BLAKE2s (xz-5.8.1.tar.bz2) = 0f3b64942c24c7a91cb39d9319e0fa7e9ccf232d985d7258131f9dc66ef98d42
+SHA512 (xz-5.8.1.tar.bz2) = 31b3dc6d5badafc0de32c0e8486c063edf9b47353876fa467a26e7968f482cde211cb11561f83d09aa328d70a76c2523fd377531d9991381558bd82960001366
+Size (xz-5.8.1.tar.bz2) = 1902964 bytes
 SHA1 (patch-src_xz_Makefile.in) = b9360c7b2b34159028fb8b84339aa2faf3922287