bzip2/bzip2.changes
Martin Pluskal 280db28620 - Update bug reference
- Fix downloaded patches
  * Make sure nSelectors is not out of range (CVE-2019-12900
    bsc#1139083)

OBS-URL: https://build.opensuse.org/package/show/Archiving/bzip2?expand=0&rev=77
2019-06-28 07:51:07 +00:00

503 lines
16 KiB
Plaintext

-------------------------------------------------------------------
Fri Jun 28 07:42:24 UTC 2019 - Martin Pluskal <mpluskal@suse.com>
- Update bug reference
- Fix downloaded patches
-------------------------------------------------------------------
Thu Jun 27 21:01:36 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com>
- Update to version 1.0.7:
* Fix undefined behavior in the macros SET_BH, CLEAR_BH, &
ISSET_BH.
* bzip2: Fix return value when combining --test,-t and -q.
* bzip2recover: Fix buffer overflow for large argv[0].
* bzip2recover: Fix use after free issue with outFile
(CVE-2016-3189).
* Make sure nSelectors is not out of range (CVE-2019-12900
bsc#1139083)
- Drop patches fixed upstream:
* bzip2-unsafe_strcpy.patch.
* bzip2-1.0.6-CVE-2016-3189.patch.
- Refresh patches with quilt.
-------------------------------------------------------------------
Thu Apr 18 10:28:36 UTC 2019 - Kristýna Streitová <kstreitova@suse.com>
- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
free vulnerability that was reported in bzip2recover [bsc#985657]
[CVE-2016-3189]
-------------------------------------------------------------------
Tue Aug 21 11:28:34 UTC 2018 - christophe@krop.fr
- Replace the URL. The bzip.org owner changed [bsc#1104445].
- Remove the URL from the 'Source' line. The 1.0.6 version is not
available.
- Run spec-cleaner.
-------------------------------------------------------------------
Wed Feb 28 11:23:11 UTC 2018 - tchvatal@suse.com
- Update autotools patchset:
D bzip2-1.0.6-autoconfiscated.patch
A bzip2-1.0.6.2-autoconfiscated.patch
-------------------------------------------------------------------
Thu Feb 22 15:10:29 UTC 2018 - fvogt@suse.com
- Use %license (boo#1082318)
-------------------------------------------------------------------
Sat Nov 4 06:35:46 UTC 2017 - bwiedemann@suse.com
- Fix build on Fedora and Mageia
-------------------------------------------------------------------
Tue Oct 31 18:09:43 CET 2017 - sbrabec@suse.com
- Update bzip2-1.0.6-autoconfiscated.patch:
* Bump version to 1.0.6.
* Fix script symlinks on platforms with EXEEXT.
-------------------------------------------------------------------
Tue Jun 6 10:32:06 UTC 2017 - mpluskal@suse.com
- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section
-------------------------------------------------------------------
Thu Mar 23 15:14:20 UTC 2017 - kstreitova@suse.com
- cleanup with spec-cleaner
-------------------------------------------------------------------
Thu Mar 24 15:44:52 UTC 2016 - kstreitova@suse.com
- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
that always returns 0 as an exit code when grepping multiple
archives [bsc#970260]
-------------------------------------------------------------------
Wed Jan 13 08:12:20 UTC 2016 - idonmez@suse.com
- Remove bzip2-faster.patch, it causes a crash with libarchive and
valgrind points out uninitialized memory. See
https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576
-------------------------------------------------------------------
Thu Jan 8 12:04:24 UTC 2015 - olaf@aepfle.de
- Avoid noarch sub package in SLE_11
-------------------------------------------------------------------
Mon Dec 29 16:48:23 UTC 2014 - tchvatal@suse.com
- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
things like steam.
- Respect cflags again, borked by previous commit.
-------------------------------------------------------------------
Fri Dec 19 11:01:43 UTC 2014 - meissner@suse.com
- build with PIE
-------------------------------------------------------------------
Mon Nov 03 16:19:00 UTC 2014 - Led <ledest@gmail.com>
- fix basisms in bzgrep and bznew
- add patches:
* bzip2-1.0.6-fix-bashisms.patch
-------------------------------------------------------------------
Tue Sep 2 15:16:50 UTC 2014 - vcizek@suse.com
- revert the bzip2-handle_pipe_input_with-f_option.patch because it
breaks other programs using the bzip2 library
-------------------------------------------------------------------
Wed Aug 6 10:51:03 UTC 2014 - idonmez@suse.com
- Implement %check
-------------------------------------------------------------------
Tue Aug 5 10:39:56 UTC 2014 - vcizek@suse.com
- handle pipe input with the -f option (bnc#884004)
* added bzip2-handle_pipe_input_with-f_option.patch
-------------------------------------------------------------------
Thu Jul 31 12:39:28 UTC 2014 - dimstar@opensuse.org
- Rename rpmlintrc to %{name}-rpmlintrc.
Follow the packaging guidelines.
-------------------------------------------------------------------
Thu Mar 21 09:01:17 UTC 2013 - mmeister@suse.com
- Added url as source.
Please see http://en.opensuse.org/SourceUrls
-------------------------------------------------------------------
Mon Jan 21 22:09:52 UTC 2013 - idonmez@suse.com
- Add %{version} to Obsoletes/Provides
-------------------------------------------------------------------
Mon Jan 21 19:15:09 UTC 2013 - jengelh@inai.de
- Executing autoreconf requires autoconf
- Set RPM groups to the common ones we use for library and
"-devel" packages
-------------------------------------------------------------------
Sun Feb 12 23:00:21 UTC 2012 - crrodriguez@opensuse.org
- Put libraries back into %{_libdir}, /usr merge project.
-------------------------------------------------------------------
Thu Jan 26 09:38:00 UTC 2012 - sitter@kde.org
- Drop bzip2-maxlen20.patch as pre-2005 compatibility should not
be a concern anymore.
-------------------------------------------------------------------
Sat Jan 7 19:26:14 UTC 2012 - crrodriguez@opensuse.org
- bzlib: open file descriptors with O_CLOEXEC, but just like
the zlib case, only when bzopen() is used and not bzdopen()
to avoid messing up with the caller's semantics.
It is responsability of to initiator to set that flag in such case.
- Replace error prone list of exported symbols with proper use of
GCC visibility features.
-------------------------------------------------------------------
Fri Sep 30 20:07:46 UTC 2011 - coolo@suse.com
- add libtool as buildrequire to make the spec file more reliable
-------------------------------------------------------------------
Sat Sep 17 21:13:00 UTC 2011 - jengelh@medozas.de
- Remove redundant tags/sections from specfile
-------------------------------------------------------------------
Wed Aug 10 17:43:49 UTC 2011 - puzel@novell.com
- package all documentation files referenced by README; also
point to bzip2-doc package (bnc#709260)
-------------------------------------------------------------------
Tue Jul 26 11:43:49 UTC 2011 - jengelh@medozas.de
- Update baselibs.conf to ship libbz2-devel-32bit
-------------------------------------------------------------------
Mon Nov 29 14:33:39 UTC 2010 - cristian.rodriguez@opensuse.org
- extend bzip2-1.0.6-autoconfiscated.patch to support
an LD version script so we export only public symbols
-------------------------------------------------------------------
Wed Nov 3 11:43:52 UTC 2010 - puzel@novell.com
- use new version of autoconfiscate patch (by sbrabec)
-------------------------------------------------------------------
Thu Sep 23 09:27:21 UTC 2010 - puzel@novell.com
- update to bzip2-1.0.6
- fixes CVE-2010-0405
- drop bzip2-CVE-2010-0405 (upstream)
-------------------------------------------------------------------
Tue Sep 21 13:54:31 UTC 2010 - puzel@novell.com
- add bzip2-CVE-2010-0405.patch (bnc#636978)
- fix copy-paste error in profile_bzip2()
-------------------------------------------------------------------
Mon Jun 28 06:38:35 UTC 2010 - jengelh@medozas.de
- use %_smp_mflags
-------------------------------------------------------------------
Wed Dec 16 10:53:20 CET 2009 - jengelh@medozas.de
- package documentation as noarch
-------------------------------------------------------------------
Sat Dec 12 18:04:29 CET 2009 - jengelh@medozas.de
- add baselibs.conf as a source
-------------------------------------------------------------------
Tue Nov 24 16:40:35 CET 2009 - sbrabec@suse.cz
- Package migrated to autoconf.
-------------------------------------------------------------------
Sun Jun 7 16:40:59 CEST 2009 - crrodriguez@suse.de
- remove static libraries see bnc#509945 for details
-------------------------------------------------------------------
Wed Dec 10 12:34:56 CET 2008 - olh@suse.de
- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade
(bnc#437293)
-------------------------------------------------------------------
Thu Oct 30 12:34:56 CET 2008 - olh@suse.de
- obsolete old -XXbit packages (bnc#437293)
-------------------------------------------------------------------
Fri Aug 1 02:51:44 CEST 2008 - jw@suse.de
- added missing header to bznew [bnc#413261]
-------------------------------------------------------------------
Wed May 14 08:11:07 CEST 2008 - coolo@suse.de
- fix rename of xxbit packages
-------------------------------------------------------------------
Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de
- added baselibs.conf file to build xxbit packages
for multilib support
-------------------------------------------------------------------
Thu Apr 3 17:12:42 CEST 2008 - lmichnovic@suse.cz
- update to version 1.5
* Fixes CERT-FI 20469 as it applies to bzip2
which obsoletes bzip2-CVE-2008-1372-CERT-FI-20469.patch
- installing scripts bzdiff, bzgrep, bzmore
and symlinks bzless, bzcmp [bnc#376464]
- addded CFLAGS in Makefile-libbz2_so (cflags.patch)
- fix unsafe strcpy in bzip2recover (unsafe_strcpy.patch)
Thanks to Red Hat.
-------------------------------------------------------------------
Wed Mar 19 18:34:23 CET 2008 - nadvornik@suse.cz
- fixed buffer overflows CVE-2008-1372 [bnc#372047]
-------------------------------------------------------------------
Thu Dec 6 11:23:02 CET 2007 - lmichnovic@suse.cz
- bznew can now repack also .tar.gz files [#342612]
The dot in suffix is explicitly checked
-------------------------------------------------------------------
Thu Nov 8 11:04:02 CET 2007 - lmichnovic@suse.cz
- added README, LICENSE, CHANGES files to libbz2-1 package
-------------------------------------------------------------------
Sun Jun 3 23:05:45 CEST 2007 - schwab@suse.de
- Fix dependency.
-------------------------------------------------------------------
Wed May 30 11:53:18 CEST 2007 - lmichnovic@suse.cz
- renamed lib to libbz2-1 according to Shared Library Packaging
Policy
- calling ldconfig for libbz2-1 package
-------------------------------------------------------------------
Fri May 25 23:28:01 CEST 2007 - dmueller@suse.de
- build with profile feedback enabled (7-15% speedup)
-------------------------------------------------------------------
Fri Mar 30 10:14:57 CEST 2007 - rguenther@suse.de
- Add PreReq to libbz2 from bzip2 to work around update problems
-------------------------------------------------------------------
Fri Mar 23 16:42:26 CET 2007 - rguenther@suse.de
- Split off doc, libbz2 and libbz2-devel packages
-------------------------------------------------------------------
Mon Jan 15 13:50:53 CET 2007 - lmichnovic@suse.cz
- Update to version 1.0.4
* Fixes some minor bugs since the last version, 1.0.3.
* Fix file permissions race problem (CAN-2005-0953).
* Avoid possible segfault in BZ2_bzclose. From Coverity's NetBSD
scan.
* 'const'/prototype cleanups in the C code.
* Change default install location to /usr/local, and handle
multiple 'make install's without error.
* Sanitise file names more carefully in bzgrep. Fixes
CAN-2005-0758 to the extent that applies to bzgrep.
* Use 'mktemp' rather than 'tempfile' in bzdiff.
* Tighten up a couple of assertions in blocksort.c following
automated analysis.
* Fix minor doc/comment bugs.
-------------------------------------------------------------------
Mon Oct 16 12:15:05 CEST 2006 - dmueller@suse.de
- strip .la files
-------------------------------------------------------------------
Wed Jan 25 21:30:02 CET 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Tue Jan 17 23:42:23 CET 2006 - schwab@suse.de
- Don't strip binaries.
-------------------------------------------------------------------
Fri Aug 12 14:18:28 CEST 2005 - mls@suse.de
- make decompress much faster
- compile with -O3
- go back to maxlen=20 when compressing
-------------------------------------------------------------------
Fri Aug 5 01:04:15 CEST 2005 - ro@suse.de
- next libdir: only package lib*
-------------------------------------------------------------------
Fri Aug 5 00:14:47 CEST 2005 - ro@suse.de
- do not package all of libdir (debuginfo)
-------------------------------------------------------------------
Mon Aug 1 17:20:37 CEST 2005 - mjancar@suse.cz
- update to 1.0.3
-------------------------------------------------------------------
Tue Jun 28 17:59:41 CEST 2005 - kukuk@suse.de
- Move shared libraries to /%{_lib}
-------------------------------------------------------------------
Thu Mar 24 14:13:05 CET 2005 - werner@suse.de
- Add bznew, a changeed version of the gzip znew.
-------------------------------------------------------------------
Tue Apr 20 09:12:22 CEST 2004 - mmj@suse.de
- Fix strict aliasing
-------------------------------------------------------------------
Sun Jan 11 10:14:36 CET 2004 - adrian@suse.de
- add %defattr and %run_ldconfig
-------------------------------------------------------------------
Wed Jul 23 19:52:00 CEST 2003 - tcrhak@suse.cz
- fixed URL
-------------------------------------------------------------------
Tue Jul 23 19:29:34 CEST 2002 - tcrhak@suse.cz
- renamed to bzip2
-------------------------------------------------------------------
Tue Feb 5 19:21:21 CET 2002 - tcrhak@suse.cz
- update to version 1.0.2
- bziped tarball
-------------------------------------------------------------------
Thu Mar 8 15:39:23 CET 2001 - nadvornik@suse.cz
- re-added /usr/include/bzlib.h
-------------------------------------------------------------------
Thu Mar 8 12:02:58 CET 2001 - bk@suse.de
- Replaced the -malign options with -mcpu=pentiumpro
-------------------------------------------------------------------
Tue Mar 6 22:08:52 CET 2001 - bk@suse.de
- add version info to libbz2 link to fix the library version number
- if i386, add -malign-loops=2 -malign-jumps=2 -malign-functions=2
-------------------------------------------------------------------
Thu Nov 30 14:38:26 CET 2000 - aj@suse.de
- New version, compile with LFS support.
-------------------------------------------------------------------
Tue Oct 3 20:52:10 CEST 2000 - kukuk@suse.de
- Set libdir for 64bit architectures
-------------------------------------------------------------------
Mon May 22 10:55:31 CEST 2000 - nadvornik@suse.cz
- update to 1.0.0
-------------------------------------------------------------------
Wed Apr 26 15:06:40 MEST 2000 - nadvornik@suse.cz
- changed Group
-------------------------------------------------------------------
Mon Apr 10 10:18:22 CEST 2000 - nadvornik@suse.cz
- added URL
-------------------------------------------------------------------
Tue Apr 4 12:05:42 CEST 2000 - nadvornik@suse.cz
- fixed to compile
-------------------------------------------------------------------
Mon Apr 3 18:34:38 CEST 2000 - bk@suse.de
- added libbz2 shared library support for s390
-------------------------------------------------------------------
Thu Mar 2 10:19:10 MET 2000 - fehr@suse.de
- moved man pages to /usr/share/man
-------------------------------------------------------------------
Mon Sep 13 17:23:57 CEST 1999 - bs@suse.de
- ran old prepare_spec on spec file to switch to new prepare_spec.
-------------------------------------------------------------------
Mon Sep 13 11:20:20 MEST 1999 - fehr@suse.de
- update to 0.9.5d
-------------------------------------------------------------------
Thu Jul 1 16:53:06 MEST 1999 - ro@suse.de
- update to 0.9.0c
-------------------------------------------------------------------
Fri Sep 18 10:28:19 MEST 1998 - ro@suse.de
- update to 0.9.0b (including libbz2 and bzlib.h)
----------------------------------------------------------------------------
Thu Oct 30 19:11:36 CET 1997 - fehr@suse.de
- add bzip package to S.u.S.E. distribution