Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Investigate replacement of xz2 with liblzma-rs #326

Open
wcampbell0x2a opened this issue Nov 7, 2023 · 2 comments
Open

Investigate replacement of xz2 with liblzma-rs #326

wcampbell0x2a opened this issue Nov 7, 2023 · 2 comments
Labels
A-backhand-lib C-enhancement New feature or request

Comments

@wcampbell0x2a
Copy link
Owner

wcampbell0x2a commented Nov 7, 2023

I'm not sure about the long term solution, but https://github.com/Portable-Network-Archive/liblzma-rs had been updated and actively maintained vs xz2.

@wcampbell0x2a wcampbell0x2a changed the title Investigate replacement of xz2 with https://github.com/Portable-Network-Archive/liblzma-rs Investigate replacement of xz2 with liblzma-rs Nov 7, 2023
@wcampbell0x2a wcampbell0x2a added C-enhancement New feature or request A-backhand-lib labels Nov 7, 2023
@wcampbell0x2a
Copy link
Owner Author

See Portable-Network-Archive/liblzma-rs#95. I'm still using xz2, which uses an older version of xz that isn't vulnerable (not that the that version is vulnerable, but given the broad changes that maintainer created in the recent releases...)

@wcampbell0x2a
Copy link
Owner Author

I think doing this with a xz-new and NOT on by default would be fine.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-backhand-lib C-enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant