MFV: xz 5.8.1.

PR: bin/286252
MFC after: 1 week

Backport export of lzma_mt_block_size symbol.

This restores binary compatibility against liblzma 5.6.0 library.

PR: 278127
MFC after: 3 days

Revert "MFV: xz 5.6.0"

This commit reverts 8db56defa766eacdbaf89a37f25b11a57fd9787a,
rolling back the vendor import of xz 5.6.0 and restoring the
package to version 5.4.5.

The revert was not direct

Revert "MFV: xz 5.6.0"

This commit reverts 8db56defa766eacdbaf89a37f25b11a57fd9787a,
rolling back the vendor import of xz 5.6.0 and restoring the
package to version 5.4.5.

The revert was not directly due to the attack (CVE-2024-3094):
our import process have removed the test cases and build scripts
that would have enabled the attack. However, reverting would
help to reduce potential confusion and false positives from
security scanners that assess risk based solely on version
numbers.

Another commit will follow to restore binary compatibility with
the liblzma 5.6.0 library by making the previously private
symbol (lzma_mt_block_size) public.

PR: 278127
MFC after: 3 days

show more ...

liblzma: don't export lzma_lz_decoder_uncompressed

It was removed in the 5.4.0 import.

Reviewed by: delphij
Differential Revision: https://reviews.freebsd.org/D44247

MFV: xz 5.6.0.

MFC after: 2 weeks

MFV: xz 5.4.0

MFC after: 2 weeks

MFV: Merge xz 5.2.8

Relnotes: yes
MFC after: 2 weeks

liblzma: Make liblzma use libmd implementation of SHA256.

MFC after: 2 weeks
PR: 200142

MFV: xz 5.8.1.

PR: bin/286252
MFC after: 1 week

Backport export of lzma_mt_block_size symbol.

This restores binary compatibility against liblzma 5.6.0 library.

PR: 278127
MFC after: 3 days

Revert "MFV: xz 5.6.0"

This commit reverts 8db56defa766eacdbaf89a37f25b11a57fd9787a,
rolling back the vendor import of xz 5.6.0 and restoring the
package to version 5.4.5.

The revert was not direct

Revert "MFV: xz 5.6.0"

This commit reverts 8db56defa766eacdbaf89a37f25b11a57fd9787a,
rolling back the vendor import of xz 5.6.0 and restoring the
package to version 5.4.5.

The revert was not directly due to the attack (CVE-2024-3094):
our import process have removed the test cases and build scripts
that would have enabled the attack. However, reverting would
help to reduce potential confusion and false positives from
security scanners that assess risk based solely on version
numbers.

Another commit will follow to restore binary compatibility with
the liblzma 5.6.0 library by making the previously private
symbol (lzma_mt_block_size) public.

PR: 278127
MFC after: 3 days

show more ...

liblzma: don't export lzma_lz_decoder_uncompressed

It was removed in the 5.4.0 import.

Reviewed by: delphij
Differential Revision: https://reviews.freebsd.org/D44247

MFV: xz 5.6.0.

MFC after: 2 weeks

MFV: xz 5.4.0

MFC after: 2 weeks

MFV: Merge xz 5.2.8

Relnotes: yes
MFC after: 2 weeks

liblzma: Make liblzma use libmd implementation of SHA256.

MFC after: 2 weeks
PR: 200142

Catch up with HEAD (r280229-r284686).

Merge sync of head

Revert r282775 for now. The added dependency would cause problems for
e.g. ports-mgmt/pkg and we would like to do an exp-build.

Requested by: bdrewery

Revert r281372, it's no longer needed after r282726 (fix for PR 199119) as the
symbol conflict between libmd and libcrypto have been solved.

Merge from head

MFH: r280643-r281852

Sponsored by: The FreeBSD Foundation

For reasons that I am not understand yet, using the libmd version of
SHA256 would make libarchive based application to give:

archive_read_extract(): Lzma library error: Corrupted input data

(Inter

For reasons that I am not understand yet, using the libmd version of
SHA256 would make libarchive based application to give:

archive_read_extract(): Lzma library error: Corrupted input data

(Internally this is LZMA_DATA_ERR)

However, the libmd version of SHA256 is supposed to give same result
as the bundled version do, and xz(1) is not affected.

As a precaution, revert the SHA256 portion of r281316 for now until
we figure out why it breaks libarchive interoperability as we can't
yet rule out this change have introduced an ABI breakage.

show more ...

MFV r281278:

- Update xz to 5.2.1, where the most visible change is that it
fixed a compression-ratio regression in fast mode LZMA1 and
LZMA2 and used cpuset_getaffinity() for CPU cores detec

MFV r281278:

- Update xz to 5.2.1, where the most visible change is that it
fixed a compression-ratio regression in fast mode LZMA1 and
LZMA2 and used cpuset_getaffinity() for CPU cores detection.
- Make liblzma use the base system SHA256 implementation instead of
the bundled one.
- Additional annotation in config.h for FreeBSD specific tweaks.
- Refresh symbols in XZprivate_1.0 to reflect reality.

Relnotes: yes
MFC after: 1 month (TBD)

show more ...

Merge from HEAD