diff --git a/file-roller.changes b/file-roller.changes index bfc0969..823b16e 100644 --- a/file-roller.changes +++ b/file-roller.changes @@ -1,3 +1,16 @@ +------------------------------------------------------------------- +Fri Jul 30 02:03:59 UTC 2021 - Yifan Jiang + +- Drop 0001-Fix-use-after-free-in-error-message-reporting.patch on + SLE and Leap 15.4: fixed upstream. + +------------------------------------------------------------------- +Wed May 26 08:00:14 UTC 2021 - Alynx Zhou + +- Add 0001-Fix-use-after-free-in-error-message-reporting.patch: + Prevent segmentation fault while displaying error message from + libarchive. (glgo#GNOME/file-roller!48, bsc#1186435) + ------------------------------------------------------------------- Sun May 2 20:26:26 UTC 2021 - Michael Gorse @@ -22,15 +35,6 @@ Wed Apr 14 00:20:42 UTC 2021 - Ferdinand Thiessen + Skip files with symlinks in parents. ( CVE-2020-36314 ) + Fix use-after-free in error message reporting. + Updated translations -- Drop 0001-Fix-use-after-free-in-error-message-reporting.patch: - fixed upstream. - -------------------------------------------------------------------- -Wed Apr 13 08:00:14 UTC 2021 - Alynx Zhou - -- Add 0001-Fix-use-after-free-in-error-message-reporting.patch: - Prevent segmentation fault while displaying error message from - libarchive. (glgo#GNOME/file-roller!48, bsc#1186435) ------------------------------------------------------------------- Mon Sep 14 12:35:51 UTC 2020 - dimstar@opensuse.org @@ -65,6 +69,16 @@ Sun Aug 9 08:05:30 UTC 2020 - Bjørn Lie + Drag-and-Drop crash after cancelling file overwrite. + Updated translations. +------------------------------------------------------------------- +Tue May 12 23:50:42 UTC 2020 - Michael Gorse + +- Update to version 3.32.5 (boo#1171486): + + libarchive: do not follow external links when extracting files + (boo#1169428 CVE-2020-11736). + + libarchive: overwrite symbolic links as well if requested by + the user. + + Updated translations. + ------------------------------------------------------------------- Sun Apr 19 18:41:56 UTC 2020 - Bjørn Lie