Merge pull request #4625 from lazka/xz-5.6.2

xz: Update to 5.6.2

xz/PKGBUILD

@@ -1,8 +1,8 @@
 # Maintainer: Alexey Pavlov <alexpux@gmail.com>
 
 pkgname=('xz' 'liblzma' 'liblzma-devel')
-pkgver=5.6.1
-pkgrel=2
+pkgver=5.6.2
+pkgrel=1
 pkgdesc='Library and command line tools for XZ and LZMA compressed files'
 arch=('i686' 'x86_64')
 url='https://tukaani.org/xz/'
@@ -15,11 +15,8 @@ license=('GPL' 'LGPL' 'custom')
 depends=('sh' 'libiconv' 'gettext')
 makedepends=('libiconv-devel' 'gettext-devel' 'autotools' 'gcc' 'po4a' 'doxygen')
 options=('staticlibs')
-# WARNING: don't use the upstream tarball until this is resolved:
-# https://github.com/tukaani-project/xz/issues/92
-# https://nvd.nist.gov/vuln/detail/CVE-2024-3094
 source=("https://github.com/tukaani-project/xz/archive/refs/tags/v${pkgver}.tar.gz")
-sha256sums=('237284fae40e5f8e9908f0a977e7d0b9a5c7c1c10a41b8e6ed0fb40e930467c8')
+sha256sums=('92a439948bba24c2bc25bb67a087a19194905209c56b5e600bc94fd2a472e687')
 validpgpkeys=('3690C240CE51B4670D30AD1C38EE757D69184620') # Lasse Collin <lasse.collin@tukaani.org>
 
 prepare() {
@@ -38,7 +35,8 @@ build() {
     --build=${CHOST} \
     --prefix=/usr \
     --enable-shared \
-    --enable-static
+    --enable-static \
+    --enable-doxygen
   make
   make DESTDIR="${srcdir}/dest" install
 }