Linux Firmware Update Utility Fwupd Will Use Zstd Compression for Future Releases
The devs are also considering enforcing signed commits in an attempt to prevent supply chain issues like the XZ backdoor.
Edit: note for downvotes: I understand some of you disagree with the need for a switch. However, are you downvoting the news itself (i.e. shooting the messenger?)
Maybe Debian’s goal is to make liblzma a dependency of everything possible? It wasn’t a standard dependency of OpenSSH either, but rather something they patched in. ;)
What’s your distro and how did you check needed libraries? I guess that
liblzma.so
can be needed bylibzstd.so
in your system.NixOS, did a
ldd (which zstd)
and then ldd on the reported libzstd file.Not using a POSIX shell before people complain about syntax
Edit: if you look at https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/tools/compression/zstd/default.nix, you’ll see that
buildInputs
is not being set, which means it can’t link to anything except the standard libraries.