use old xz mirror, fix CVE-2024-3094 (#399)

* use old xz mirror, fix CVE-2024-3094

* add test
This commit is contained in:
Jerry Ma
2024-04-02 11:31:29 +08:00
committed by GitHub
parent d445668d9f
commit d3a001d808
2 changed files with 5 additions and 6 deletions

View File

@@ -646,9 +646,8 @@
}
},
"xz": {
"type": "ghrel",
"repo": "tukaani-project/xz",
"match": "xz-.+\\.tar\\.gz",
"type": "url",
"url": "https://fossies.org/linux/misc/xz-5.4.6.tar.xz",
"license": {
"type": "file",
"path": "COPYING"