search

indygreg / python-build-standalone

Produce redistributable builds of Python
BSD 3-Clause "New" or "Revised" License
1.71k stars 107 forks source link

Find another mirror for xz #242

Closed indygreg closed 3 months ago

indygreg commented 3 months ago

Due to the xz security incident that broke yesterday, GitHub took the xz project on GitHub offline. https://tukaani.org/xz/xz-5.2.12.tar.gz is redirecting to GitHub release artifacts, which now don't work.

We should find another mirror for xz-5.2.12.tar.gz.

indygreg commented 3 months ago

I couldn't find a mirror in 10 minutes of searching. I had a copy sitting on my local machine. So I just uploaded that to an existing GitHub release of this project. https://github.com/indygreg/python-build-standalone/releases/download/20240224/xz-5.2.12.tar.gz

bluss commented 3 months ago

Should find another version eventually, since the named release here - 5.2.12 - was also made by the same pseudonym.