On Sat, Mar 25, 2017 at 7:26 AM, Ariel Santana Naranjo <snar...@gmail.com> wrote: > Dear maintainers, > > I have made an unsettling discovery: > http://www.nongnu.org/lzip/lzip_benchmark.html#busybox > "error detection in the xz format is silently broken." > > If this is true (and it might be, because it provides a reproducer), why > is such a central project as GNU Coreutils being distributed in xz > format only? Shouldn't Coreutils switch to a safe-by-default compressed > format, as the above link suggests?
This has been discussed before: - https://lists.gnu.org/archive/html/coreutils/2016-09/msg00028.html - http://lists.gnu.org/archive/html/coreutils/2017-01/msg00008.html
