shinchiro / mpv-winbuild-cmake

CMake-based MinGW-w64 Cross Toolchain
487 stars 91 forks source link

packages: remove xz #652

Closed Andarwinux closed 3 months ago

zhongfly commented 3 months ago

we can use https://gitlab.com/shinchiro/xz/-/tags/v5.5.2beta According to https://www.openwall.com/lists/oss-security/2024/03/29/4 , the malicious code originally appeared in cf44e4b7f5dfdbf8c78aef377c10f71e274f63c0 , and versions prior to 5.6.0 do not contain this commit