Fwupd Switches From XZ To Zstd Compression: More Trust & Slightly Better Performance

Written by Michael Larabel in LVFS on 3 April 2024 at 06:40 AM EDT. 49 Comments
Driven by the XZ security fiasco with malicious code aimed at remote code execution, more open-source projects are re-evaluating their dependence on XZ out of an abundance of caution. The latest to take action is the Fwupd Linux firmware updating utility with LVFS that will now prefer Zstd compression instead of XZ.

Fwupd has relied on XZ for compressing its large XML payload for speeding up network downloads and conserving CDN resources. XZ allowed for better compression than Gzip previously used. But out of an abundance of caution given concerns over the XZ project, Richard Hughes has now moved over to using Zstd instead.


Not only is Zstd more trustworthy but it ended up yielding compressed metadata around 3% smaller than XZ and is faster at decompressing the data too.

This change will go into the Fwupd release due out next week. More details on Fwupd moving from XZ to Zstd via this blog post.
Related News
About The Author
Michael Larabel

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via MichaelLarabel.com.

Popular News This Week