Resolves https://github.com/microsoft/vcpkg/issues/37839
Reverts #37199
See https://www.openwall.com/lists/oss-security/2024/03/29/4
Note that the version database is unmodified, only the baseline is
changed.
Because vcpkg builds liblzma from cmake sources downloaded from github
and this backdoor required modifications only present in the release
tarballs, it is our belief that vcpkg customers are not affected by this
problem. However, we are reverting this version out of an abundance of
caution as the threat actor clearly has broad access to liblzma
infrastructure, and because we believe customers will start flagging
this package by version as being a problem.
Fixes#37197.
- [x] Changes comply with the [maintainer
guide](https://github.com/microsoft/vcpkg-docs/blob/main/vcpkg/contributing/maintainer-guide.md).
- [x] SHA512s are updated for each updated download.
- [x] The "supports" clause reflects platforms that may be fixed by this
new version.
- [x] Any fixed [CI
baseline](https://github.com/microsoft/vcpkg/blob/master/scripts/ci.baseline.txt)
entries are removed from that file.
- [x] Any patches that are no longer applied are deleted from the port's
directory.
- [x] The version database is fixed by rerunning `./vcpkg x-add-version
--all` and committing the result.
- [x] Only one version is added to each modified port's versions file.
The update to version 5.6.0, includes the following changes
* the patches were adapted for changes in the new version (I cannot
check if the patch for iOS support was adapted correctly)
* the new tools `lzmadec` and `lzmainfo` are handled in the same manner
as the existing tools `xz` and `xzdec`
* ~nls was disabled to sidestep an issue with installing the man pages~
* ~a new feature `nls` was added to enable native language support. This
was necessary to handle a new optional dependency on `gettext` so that
the existing `tools` feature continues to work.~
* nls support was not added, yet. See discussion below for details.
I have successfully built
* `liblzma:x86-windows`,
* `liblzma:x64-windows`,
* `liblzma:x64-linux`,
* `liblzma[tools]:x64-linux`,
Note that `tools` is not supported on `windows`.
Requested by @Neustradamus
EDIT 1: added nls feature
EDIT 2: removed nls feature again
* [liblzma] add install bundle for support build target for ios platform.
* Remove the deprecated functions
* format vcpkg.json
* Update the baseline version
Co-authored-by: PhoebeHui <20694052+PhoebeHui@users.noreply.github.com>
* [liblzma] Patch headers to fix https://github.com/OpenTTD/OpenTTD/pull/7614
* Bump the version in CONTROL file
Co-authored-by: Billy Robert O'Neal III <bion@microsoft.com>
Co-authored-by: PhoebeHui <20694052+PhoebeHui@users.noreply.github.com>
Co-authored-by: nicole mazzuca <mazzucan@outlook.com>
* [liblzma] Update to v5.2.5
* [liblzma] Use WIN32 instead of MSVC
* [libvpx] Add mingw support
* Update portfile.cmake
* Update CONTROL
* Update CONTROL
Co-authored-by: Lily <47812810+LilyWangL@users.noreply.github.com>
* fix 7426 issue
* fix 7426 issue -change the CONTROL file
* [liblzma] Remove quantlib:x64-os from ci.baseline.txt
* [liblzma] Update the CONTROL version
* [LibLZMA] add a config-generated by CMake
* bump control files of LibLZMA and dependent ports
* [tiff] use proper liblzma target
[OpenCV] add an explicit dependency on LibLZMA for static linking
* [liblzma] fix header install path
* [LibLZMA] avoid using targets in old symbols
* fixes for windows-static and trying to see if CI is happier with a share/lib folder written in lowercase
* [LibLZMA] use only modern CMake language, remove patch in favour of target public definition
* [lzma] put symbols in cmake cache
* [libxmlpp] remove CMAKE_WINDOWS_EXPORT_ALL_SYMBOLS regression
* [lzma] fix header install path
* [liblzma] install wrapper to force config mode
* [liblzma] remove function check inside cmake config since we know it will pass
* [liblzma] wrapper fix
* [tiff,geotiff] general cleanup and patch fixes
* [libgeotiff] remove debug tools
* [tesseract] modernize
* [tiff] fix also tiff_library symbol
* [pdal,libgeotiff] better library integration
* [tiff] restore using unix i/o on UWP, since it was working... for sure win32 one cannot work
* [tiff] enable lzma also on uwp, since it works and is requested by many dependencies
* [selene] enable build on arm/arm64-windows, which was surely broken before
* [lzma] uniform naming with cmake 3.14
* [podofo] fix regression, it requires openssl which was disabled in dependencies
* [many ports] remove unnecessary mods
* [boost-iostream] chmod
* [openssl] fix regression due to missing architecture
* [podofo] fix regression on uwp due to missing include
* [libpq] explicitly fail on UWP, it should avoid being marked as regression
* [shiva] fix regression on linux
