From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1JuIp7-00011h-1r for garchives@archives.gentoo.org; Fri, 09 May 2008 02:59:05 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 9E162E062C; Fri, 9 May 2008 02:59:03 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id 28D8AE0618 for ; Fri, 9 May 2008 02:59:03 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp.gentoo.org (Postfix) with ESMTP id 69CE067DDA for ; Fri, 9 May 2008 01:05:09 +0000 (UTC) X-Virus-Scanned: amavisd-new at gentoo.org X-Spam-Score: -2.436 X-Spam-Level: X-Spam-Status: No, score=-2.436 required=5.5 tests=[AWL=1.163, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from smtp.gentoo.org ([127.0.0.1]) by localhost (smtp.gentoo.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EwcxLp1uBvVI for ; Fri, 9 May 2008 01:05:02 +0000 (UTC) Received: from ciao.gmane.org (main.gmane.org [80.91.229.2]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTP id AED1B67DD1 for ; Fri, 9 May 2008 01:05:00 +0000 (UTC) Received: from list by ciao.gmane.org with local (Exim 4.43) id 1JuH2g-0004Ck-G3 for gentoo-dev@gentoo.org; Fri, 09 May 2008 01:04:58 +0000 Received: from static24-72-115-196.yorkton.accesscomm.ca ([24.72.115.196]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Fri, 09 May 2008 01:04:58 +0000 Received: from dirtyepic by static24-72-115-196.yorkton.accesscomm.ca with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Fri, 09 May 2008 01:04:58 +0000 X-Injected-Via-Gmane: http://gmane.org/ To: gentoo-dev@lists.gentoo.org From: Ryan Hill Subject: [gentoo-dev] Re: RFC: lzma tarball usage Date: Thu, 8 May 2008 19:04:10 -0600 Message-ID: <20080508190410.7bb29074@halo.dirtyepic.sk.ca> References: <1210166592.19574.10.camel@localhost> <20080507185239.541383c9@halo.dirtyepic.sk.ca> <4822FD54.4000904@gentoo.org> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org Mime-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/xMVOag5a.LfPxN7+Ax8fwWD"; protocol="application/pgp-signature"; micalg=PGP-SHA1 X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: static24-72-115-196.yorkton.accesscomm.ca X-Newsreader: Claws Mail 3.3.1 (GTK+ 2.12.9; x86_64-pc-linux-gnu) Sender: news X-Archives-Salt: c9549570-faf9-4d92-87ee-b3e786607daf X-Archives-Hash: 97be90f9fb565dffcb2b2dbffbd9b849 --Sig_/xMVOag5a.LfPxN7+Ax8fwWD Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On Thu, 08 May 2008 09:17:08 -0400 Doug Goldstein wrote: > Ryan Hill wrote: > > The new lzma-utils codebase uses liblzma, written in C. It's at the > > alpha stage but supposedly supports encoding/decoding the current > > lzma format "well enough" (;P). It probably has some fun bugs to > > find and squish. > > > > http://sf.net/mailarchive/forum.php?thread_name=3D200804251652.58484.la= sse.collin%40tukaani.org&forum_name=3Dlzmautils-announce > According to the mailing list this change was done to fix security > holes in the format and also resulted in a slightly different format > that's incompatible with the previous verion. So lzma 5.x and higher > will be a different on disk format. It's troubling to me that > projects are using lzma when it's on disk format isn't even final and > the project has security issues. The current format is fine. It's the new format that has design/security issues. Yes the formats are incompatible, but so are .tar.lzma and .7z, which are both lzma. Either way I was just offering it as a data point. I have no real opinion one way or the other. --=20 fonts, gcc-porting, by design, by neglect mips, treecleaner, for a fact or just for effect wxwidgets @ gentoo EFFD 380E 047A 4B51 D2BD C64F 8AA8 8346 F9A4 0662 --Sig_/xMVOag5a.LfPxN7+Ax8fwWD Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) iEYEARECAAYFAkgjowoACgkQiqiDRvmkBmJJ5ACg0HJShdYbOpvLANQLgzNdS040 ItIAniJIxbe8MjWTPwKOUNZoFWHUG04C =G7cN -----END PGP SIGNATURE----- --Sig_/xMVOag5a.LfPxN7+Ax8fwWD-- -- gentoo-dev@lists.gentoo.org mailing list