[PR PATCH] Revert "xz: update to 5.6.0."

[PR PATCH] Revert "xz: update to 5.6.0."

[Gottox]

[-- Attachment #1: Type: text/plain, Size: 446 bytes --]

There is a new pull request by Gottox against master on the void-packages repository

https://github.com/Gottox/void-packages fix/revert-xz
https://github.com/void-linux/void-packages/pull/49593

Revert "xz: update to 5.6.0."
This reverts commit ba6c7f1ffc6012148b0deea038c23794cb93c6c5.

See: https://www.openwall.com/lists/oss-security/2024/03/29/4


A patch file from https://github.com/void-linux/void-packages/pull/49593.patch is attached

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: github-pr-fix/revert-xz-49593.patch --]
[-- Type: text/x-diff, Size: 1670 bytes --]

From 1a595d64351e4f638c93bd406e731ff6553dad29 Mon Sep 17 00:00:00 2001
From: Enno Boland <gottox@voidlinux.org>
Date: Fri, 29 Mar 2024 18:40:14 +0100
Subject: [PATCH] Revert "xz: update to 5.6.0."

This reverts commit ba6c7f1ffc6012148b0deea038c23794cb93c6c5.

See: https://www.openwall.com/lists/oss-security/2024/03/29/4
---
 srcpkgs/xz/template | 18 +++++-------------
 1 file changed, 5 insertions(+), 13 deletions(-)

diff --git a/srcpkgs/xz/template b/srcpkgs/xz/template
index 8aa5650cfcb792..a5365b89c8dc93 100644
--- a/srcpkgs/xz/template
+++ b/srcpkgs/xz/template
@@ -1,21 +1,18 @@
 # Template file for 'xz'
+reverts="5.6.0_1"
 pkgname=xz
-version=5.6.0
-revision=1
+version=5.4.6
+revision=2
 bootstrap=yes
 build_style=gnu-configure
 configure_args="--disable-doc"
 short_desc="XZ compression utilities"
 maintainer="Enno Boland <gottox@voidlinux.org>"
-license="0BSD, GPL-2.0-or-later, GPL-3.0-or-later, LGPL-2.1-or-later"
+license="Public Domain, GPL-2.0-or-later, GPL-3.0-or-later, LGPL-2.1-or-later"
 homepage="https://xz.tukaani.org"
 changelog="https://git.tukaani.org/?p=xz.git;a=blob_plain;f=NEWS"
 distfiles="https://github.com/tukaani-project/xz/releases/download/v${version}/xz-${version}.tar.gz"
-checksum=0f5c81f14171b74fcc9777d302304d964e63ffc2d7b634ef023a7249d9b5d875
-
-if [ "$XBPS_TARGET_LIBC" = "musl" ]; then
-	configure_args+=" --disable-sandbox"
-fi
+checksum=aeba3e03bf8140ddedf62a0a367158340520f6b384f75ca6045ccc6c0d43fd5c
 
 liblzma_package() {
 	short_desc="XZ-format compression library"
@@ -34,8 +31,3 @@ liblzma-devel_package() {
 		vmove usr/lib/pkgconfig
 	}
 }
-
-post_install() {
-	vlicense COPYING
-	vlicense COPYING.0BSD
-}

Re: [PR PATCH] [Merged]: Revert "xz: update to 5.6.0."

[Gottox]

[-- Attachment #1: Type: text/plain, Size: 291 bytes --]

There's a merged pull request on the void-packages repository

Revert "xz: update to 5.6.0."
https://github.com/void-linux/void-packages/pull/49593

Description:
This reverts commit ba6c7f1ffc6012148b0deea038c23794cb93c6c5.

See: https://www.openwall.com/lists/oss-security/2024/03/29/4

Re: Revert "xz: update to 5.6.0."

[melroy89]

[-- Attachment #1: Type: text/plain, Size: 151 bytes --]

New comment by melroy89 on void-packages repository

https://github.com/void-linux/void-packages/pull/49593#issuecomment-2028469435

Comment:
Thanks! 

Re: Revert "xz: update to 5.6.0."

[melroy89]

[-- Attachment #1: Type: text/plain, Size: 226 bytes --]

New comment by melroy89 on void-packages repository

https://github.com/void-linux/void-packages/pull/49593#issuecomment-2028469646

Comment:
However the upstream repo has been disabled (`This repository has been disabled.`).

Re: Revert "xz: update to 5.6.0."

[Gottox]

[-- Attachment #1: Type: text/plain, Size: 204 bytes --]

New comment by Gottox on void-packages repository

https://github.com/void-linux/void-packages/pull/49593#issuecomment-2028804894

Comment:
Shouldn't be an issue. We can serve these files from our cache.