From: Jonathan Corbet <corbet@lwn.net>
To: Kees Cook <keescook@chromium.org>,
Andrew Morton <akpm@linux-foundation.org>
Cc: Lasse Collin <lasse.collin@tukaani.org>,
Jia Tan <jiat0218@gmail.com>,
linux-kernel@vger.kernel.org
Subject: Re: [tech-board] [PATCH 00/11] xz: Updates to license, filters, and compression options
Date: Fri, 29 Mar 2024 14:51:41 -0600 [thread overview]
Message-ID: <87h6go3go2.fsf@meer.lwn.net> (raw)
In-Reply-To: <202403291221.124220E0F4@keescook>
"Kees Cook" <keescook@chromium.org> writes:
> On Wed, Mar 20, 2024 at 08:38:33PM +0200, Lasse Collin wrote:
>> XZ Embedded, the upstream project, switched from public domain to the
>> BSD Zero Clause License (0BSD). Now matching SPDX license identifiers
>> can be added.
>>
>> The new ARM64 and RISC-V filters can be used by Squashfs.
>>
>> Account for the default threading change made in the xz command line
>> tool version 5.6.0. Tweak kernel compression options for archs that
>> support XZ compressed kernel.
>>
>> Documentation was revised. There are minor cleanups too.
>>
>> Lasse Collin (11):
>> MAINTAINERS: Add XZ Embedded maintainers
>> LICENSES: Add 0BSD license text
>> xz: Switch from public domain to BSD Zero Clause License (0BSD)
>> xz: Documentation/staging/xz.rst: Revise thoroughly
>> xz: Fix comments and coding style
>> xz: Cleanup CRC32 edits from 2018
>> xz: Optimize for-loop conditions in the BCJ decoders
>> xz: Add ARM64 BCJ filter
>> xz: Add RISC-V BCJ filter
>> xz: Use 128 MiB dictionary and force single-threaded mode
>> xz: Adjust arch-specific options for better kernel compression
>>
>> Documentation/staging/xz.rst | 130 ++++++++---------------
>> LICENSES/deprecated/0BSD | 23 ++++
>> MAINTAINERS | 14 +++
>> include/linux/decompress/unxz.h | 5 +-
>> include/linux/xz.h | 5 +-
>> init/Kconfig | 5 +-
>> lib/decompress_unxz.c | 39 ++++---
>> lib/xz/Kconfig | 13 ++-
>> lib/xz/xz_crc32.c | 7 +-
>> lib/xz/xz_dec_bcj.c | 183 ++++++++++++++++++++++++++++++--
>> lib/xz/xz_dec_lzma2.c | 5 +-
>> lib/xz/xz_dec_stream.c | 5 +-
>> lib/xz/xz_dec_syms.c | 16 +--
>> lib/xz/xz_dec_test.c | 12 +--
>> lib/xz/xz_lzma2.h | 5 +-
>> lib/xz/xz_private.h | 20 ++--
>> lib/xz/xz_stream.h | 7 +-
>> scripts/Makefile.lib | 13 ++-
>> scripts/xz_wrap.sh | 157 +++++++++++++++++++++++++--
>> 19 files changed, 487 insertions(+), 177 deletions(-)
>> create mode 100644 LICENSES/deprecated/0BSD
>
> Andrew (and anyone else), please do not take this code right now.
>
> Until the backdooring of upstream xz[1] is fully understood, we should not
> accept any code from Jia Tan, Lasse Collin, or any other folks associated
> with tukaani.org. It appears the domain, or at least credentials
> associated with Jia Tan, have been used to create an obfuscated ssh
> server backdoor via the xz upstream releases since at least 5.6.0.
> Without extensive analysis, we should not take any associated code.
> It may be worth doing some retrospective analysis of past contributions
> as well...
>
> Lasse, are you able to comment about what is going on here?
FWIW, it looks like this series has been in linux-next for a few days.
Maybe it needs to come out, for now at least?
jon
next prev parent reply other threads:[~2024-03-29 20:51 UTC|newest]
Thread overview: 22+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-03-20 18:38 [PATCH 00/11] xz: Updates to license, filters, and compression options Lasse Collin
2024-03-20 18:38 ` [PATCH 01/11] MAINTAINERS: Add XZ Embedded maintainers Lasse Collin
2024-03-20 18:38 ` [PATCH 02/11] LICENSES: Add 0BSD license text Lasse Collin
2024-03-20 18:38 ` [PATCH 03/11] xz: Switch from public domain to BSD Zero Clause License (0BSD) Lasse Collin
2024-03-20 18:38 ` [PATCH 04/11] xz: Documentation/staging/xz.rst: Revise thoroughly Lasse Collin
2024-03-20 18:38 ` [PATCH 05/11] xz: Fix comments and coding style Lasse Collin
2024-03-20 18:38 ` [PATCH 06/11] xz: Cleanup CRC32 edits from 2018 Lasse Collin
2024-03-20 18:38 ` [PATCH 07/11] xz: Optimize for-loop conditions in the BCJ decoders Lasse Collin
2024-03-20 18:38 ` [PATCH 08/11] xz: Add ARM64 BCJ filter Lasse Collin
2024-03-20 18:38 ` [PATCH 09/11] xz: Add RISC-V " Lasse Collin
2024-03-20 18:38 ` [PATCH 10/11] xz: Use 128 MiB dictionary and force single-threaded mode Lasse Collin
2024-03-20 18:38 ` [PATCH 11/11] xz: Adjust arch-specific options for better kernel compression Lasse Collin
2024-03-31 0:42 ` angel.lkml
2024-04-03 19:59 ` Lasse Collin
2024-04-04 14:01 ` Lasse Collin
2024-03-29 19:24 ` [PATCH 00/11] xz: Updates to license, filters, and compression options Jonathan Bennett
2024-03-29 19:32 ` Kees Cook
2024-03-29 20:51 ` Jonathan Corbet [this message]
2024-03-30 0:37 ` Kees Cook
2024-03-30 2:56 ` [tech-board] " Andrew Morton
2024-03-30 12:48 ` Lasse Collin
2024-03-30 13:54 ` Kees Cook
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87h6go3go2.fsf@meer.lwn.net \
--to=corbet@lwn.net \
--cc=akpm@linux-foundation.org \
--cc=jiat0218@gmail.com \
--cc=keescook@chromium.org \
--cc=lasse.collin@tukaani.org \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).