From 9da3ecf0affc45adae91f52cc3ba33fadf372c93 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Luc=C3=ADa=20Andrea=20Illanes=20Albornoz?=
 <lucia@luciaillanes.de>
Date: Fri, 29 Mar 2024 17:32:23 +0100
Subject: groups.d/231.native_packages_etc.group:xz: downgraded to v5.4.6 due
 to backdoor in upstream xz >=5.6.0. groups.d/010.host_deps.group:xz_host: fix
 broken URL; upgraded to v5.4.6.

<https://www.openwall.com/lists/oss-security/2024/03/29/4>
---
 groups.d/010.host_deps.group           | 6 +++---
 groups.d/231.native_packages_etc.group | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/groups.d/010.host_deps.group b/groups.d/010.host_deps.group
index 37f13ecf..db0035a7 100644
--- a/groups.d/010.host_deps.group
+++ b/groups.d/010.host_deps.group
@@ -264,8 +264,8 @@ HOST_DEPS_TOOLS_RPM_DISABLE=1;
 : ${PKG_UTIL_LINUX_HOST_VERSION:=2.36.1};
 : ${PKG_UTIL_LINUX_HOST_URL:=https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v${PKG_UTIL_LINUX_HOST_VERSION%.*}/util-linux-${PKG_UTIL_LINUX_HOST_VERSION}.tar.gz};
 : ${PKG_UTIL_LINUX_HOST_CONFIGURE_ARGS_EXTRA:="--disable-all-programs --enable-libuuid"};
-: ${PKG_XZ_HOST_SHA256SUM:=5d9827aa1875b21c288f78864bb26d2650b436ea8d2cad364e4921eb6266a5a5};
-: ${PKG_XZ_HOST_VERSION:=5.4.1};
-: ${PKG_XZ_HOST_URL:=https://fossies.org/linux/misc/xz-${PKG_XZ_HOST_VERSION}.tar.xz};
+: ${PKG_XZ_HOST_SHA256SUM:=b92d4e3a438affcf13362a1305cd9d94ed47ddda22e456a42791e630a5644f5c};
+: ${PKG_XZ_HOST_VERSION:=5.4.6};
+: ${PKG_XZ_HOST_URL:=https://github.com/tukaani-project/xz/releases/download/v${PKG_XZ_HOST_VERSION}/xz-${PKG_XZ_HOST_VERSION}.tar.xz};
 
 # vim:filetype=sh textwidth=0
diff --git a/groups.d/231.native_packages_etc.group b/groups.d/231.native_packages_etc.group
index 17a96d01..576449b2 100644
--- a/groups.d/231.native_packages_etc.group
+++ b/groups.d/231.native_packages_etc.group
@@ -542,9 +542,9 @@ vim_cv_timer_create=yes"};
 	-DFREETYPE_LIBRARY=${PREFIX_NATIVE}/lib/libfreetype.lib.a
 	-DFREETYPE_INCLUDE_DIR_ft2build=${PREFIX_NATIVE}/include/ft2build
 	-DFONTCONFIG_LIBRARY=${PREFIX_NATIVE}/lib/libfontconfig.lib.a"};
-: ${PKG_XZ_SHA256SUM:=f334777310ca3ae9ba07206d78ed286a655aa3f44eec27854f740c26b2cd2ed0};
-: ${PKG_XZ_VERSION:=5.6.1};
-: ${PKG_XZ_URL:=https://fossies.org/linux/misc/xz-${PKG_XZ_VERSION}.tar.xz};
+: ${PKG_XZ_SHA256SUM:=b92d4e3a438affcf13362a1305cd9d94ed47ddda22e456a42791e630a5644f5c};
+: ${PKG_XZ_VERSION:=5.4.6};
+: ${PKG_XZ_URL:=https://github.com/tukaani-project/xz/releases/download/v${PKG_XZ_VERSION}/xz-${PKG_XZ_VERSION}.tar.xz};
 : ${PKG_XZ_CFLAGS_BUILD_EXTRA:="-DLZMA_RANGE_DECODER_CONFIG=3"};
 : ${PKG_YABASIC_SHA256SUM:=24eaca1a520817ec266d132d89b4a657d5adf3e6bad54f13b103991afdca6d40};
 : ${PKG_YABASIC_VERSION:=2.83.0};
-- 
cgit v1.2.3