Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package xz for openSUSE:Factory checked in at 2025-04-10 21:57:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/xz (Old) and /work/SRC/openSUSE:Factory/.xz.new.1907 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "xz" Thu Apr 10 21:57:10 2025 rev:94 rq:1267982 version:5.8.1 Changes: -------- --- /work/SRC/openSUSE:Factory/xz/xz.changes 2025-02-07 22:46:31.663953740 +0100 +++ /work/SRC/openSUSE:Factory/.xz.new.1907/xz.changes 2025-04-10 21:57:15.051595677 +0200 @@ -1,0 +2,57 @@ +Thu Apr 3 15:43:23 UTC 2025 - Antonio Teixeira <antonio.teixe...@suse.com> + +- Update to 5.8.1: + * Multithreaded .xz decoder (lzma_stream_decoder_mt()): + - Fix a bug that could at least result in a crash with + invalid input. (bsc#1240414, CVE-2025-31115) + - Fix a performance bug: Only one thread was used if the whole + input file was provided at once to lzma_code(), the output + buffer was big enough, timeout was disabled, and LZMA_FINISH + was used. There are no bug reports about this, thus it's + possible that no real-world application was affected. + * Avoid <stdalign.h> even with C11/C17 compilers. This fixes the + build with Oracle Developer Studio 12.6 on Solaris 10 when the + compiler is in C11 mode (the header doesn't exist). + * Autotools: Restore compatibility with GNU make versions older + than 4.0 by creating the package using GNU gettext 0.23.1 + infrastructure instead of 0.24. + * Update Croatian translation. +- 5.8.0 changelog: + * liblzma on 32/64-bit x86: When possible, use SSE2 intrinsics + instead of memcpy() in the LZMA/LZMA2 decoder. In typical cases, + this may reduce decompression time by 0-5 %. However, when built + against musl libc, over 15 % time reduction was observed with + highly compressed files. + * CMake: Make the feature test macros match the Autotools-based + build on NetBSD, Darwin, and mingw-w64. + * Update the Croatian, Italian, Portuguese, and Romanian + translations. + * Update the German, Italian, Korean, Romanian, Serbian, and + Ukrainian man page translations. +- Summary of changes in the 5.7.x development releases: + * Mark the following LZMA Utils script aliases as deprecated: + lzcmp, lzdiff, lzless, lzmore, lzgrep, lzegrep, and lzfgrep. + * liblzma: + - Improve LZMA/LZMA2 encoder speed on 64-bit PowerPC (both + endiannesses) and those 64-bit RISC-V processors that + support fast unaligned access. + - Add low-level APIs for RISC-V, ARM64, and x86 BCJ filters + to lzma/bcj.h. These are primarily for erofs-utils. + - x86/x86-64/E2K CLMUL CRC code was rewritten. + - Use the CRC32 instructions on LoongArch. + * xz: + - Synchronize the output file and its directory using fsync() + before deleting the input file. No syncing is done when xz + isn't going to delete the input file. + - Add --no-sync to disable the sync-before-delete behavior. + - Make --single-stream imply --keep. + * xz, xzdec, lzmainfo: When printing messages, replace + non-printable characters with question marks. + * xz and xzdec on Linux: Support Landlock ABI versions 5 and 6. + * CMake: Revise the configuration variables and some of their + options, and document them in the file INSTALL. CMake support + is no longer experimental. (It was already not experimental + when building for native Windows.) + * Add build-aux/license-check.sh. + +------------------------------------------------------------------- Old: ---- xz-5.6.4.tar.xz xz-5.6.4.tar.xz.sig New: ---- xz-5.8.1.tar.xz xz-5.8.1.tar.xz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ xz.spec ++++++ --- /var/tmp/diff_new_pack.vtoBNp/_old 2025-04-10 21:57:15.651620728 +0200 +++ /var/tmp/diff_new_pack.vtoBNp/_new 2025-04-10 21:57:15.655620895 +0200 @@ -1,7 +1,7 @@ # # spec file for package xz # -# Copyright (c) 2024 SUSE LLC +# Copyright (c) 2025 SUSE LLC # Copyright (c) 2025 Andreas Stieger <andreas.stie...@gmx.de> # # All modifications and additions to the file contributed by third parties @@ -24,7 +24,7 @@ %bcond_with static %endif Name: xz -Version: 5.6.4 +Version: 5.8.1 Release: 0 Summary: A Program for Compressing Files with the LempelâZivâMarkov algorithm License: 0BSD AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later ++++++ xz-5.6.4.tar.xz -> xz-5.8.1.tar.xz ++++++ ++++ 68123 lines of diff (skipped)