Marcus Meissner
d00ef480b7
- update to 2.08 (bnc#883947) CVE-2014-4607
- Updated the Autoconf scripts to fix some reported build
problems.
- Added CMake build support.
- Fixed lzo_init() on big-endian architectures like Sparc.
- additional changes in 2.07
* Fixed a potential integer overflow condition in the "safe"
decompressor variants which could result in a possible buffer
overrun when processing maliciously crafted compressed input
data.
Fortunately this issue only affects 32-bit systems and also can
only happen if you use uncommonly huge buffer sizes where you
have to decompress more than 16 MiB (> 2^24 bytes) untrusted
compressed bytes within a single function call, so the
practical implications are limited.
POTENTIAL SECURITY ISSUE. CVE-2014-4607.
* Removed support for ancient configurations like 16-bit "huge"
pointers - LZO now requires a flat 32-bit or 64-bit memory
model.
* Assorted cleanups.
OBS-URL: https://build.opensuse.org/request/show/239294
OBS-URL: https://build.opensuse.org/package/show/Base:System/lzo?expand=0&rev=24
164 lines
5.4 KiB
Plaintext
164 lines
5.4 KiB
Plaintext
-------------------------------------------------------------------
|
|
Wed Jul 2 11:35:21 UTC 2014 - mrueckert@suse.de
|
|
|
|
- update to 2.08 (bnc#883947) CVE-2014-4607
|
|
- Updated the Autoconf scripts to fix some reported build
|
|
problems.
|
|
- Added CMake build support.
|
|
- Fixed lzo_init() on big-endian architectures like Sparc.
|
|
- additional changes in 2.07
|
|
* Fixed a potential integer overflow condition in the "safe"
|
|
decompressor variants which could result in a possible buffer
|
|
overrun when processing maliciously crafted compressed input
|
|
data.
|
|
|
|
Fortunately this issue only affects 32-bit systems and also can
|
|
only happen if you use uncommonly huge buffer sizes where you
|
|
have to decompress more than 16 MiB (> 2^24 bytes) untrusted
|
|
compressed bytes within a single function call, so the
|
|
practical implications are limited.
|
|
|
|
POTENTIAL SECURITY ISSUE. CVE-2014-4607.
|
|
|
|
* Removed support for ancient configurations like 16-bit "huge"
|
|
pointers - LZO now requires a flat 32-bit or 64-bit memory
|
|
model.
|
|
* Assorted cleanups.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Apr 16 12:26:44 UTC 2013 - mmeister@suse.com
|
|
|
|
- Added url as source.
|
|
Please see http://en.opensuse.org/SourceUrls
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Aug 27 14:57:29 UTC 2012 - cfarrell@suse.com
|
|
|
|
- license update: GPL-2.0+
|
|
No GPL-2.0 "only" licenses found in the package
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Feb 11 19:32:14 UTC 2012 - crrodriguez@opensuse.org
|
|
|
|
- move libraries back to %{_libdir}, /usr merge project
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Sep 25 17:06:01 UTC 2011 - crrodriguez@opensuse.org
|
|
|
|
- Update to version 2.06
|
|
* Some minor optimizations for big-endian architectures.
|
|
* Fixed overly strict malloc() misalignment check in examples.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri May 6 13:51:51 UTC 2011 - crrodriguez@opensuse.org
|
|
|
|
- Update to version 2.05
|
|
* Converted the configure system to non-recursive Automake.
|
|
* Applied some overdue speed optimizations for modern x86/x64 architectures
|
|
and current compilers like gcc 4.6 and MSVC 2010.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Dec 22 03:29:01 UTC 2010 - aj@suse.de
|
|
|
|
- Fix specfile (remove deleted lzo-2.03-alias.patch).
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Nov 12 11:09:42 UTC 2010 - mrueckert@suse.de
|
|
|
|
- update to 2.0.4
|
|
* Fixed a gcc-4.5 aliasing issue in lzo_init().
|
|
* Updated the configure system.
|
|
* Assorted cleanups.
|
|
- dropped lzo-2.03-alias.patch:
|
|
solved differently upstream
|
|
- dropped debug_package_requires define
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Oct 30 19:05:43 UTC 2010 - cristian.rodriguez@opensuse.org
|
|
|
|
- Use GCC visibility.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Feb 11 12:30:25 CET 2010 - rguenther@suse.de
|
|
|
|
- fix aliasing problems
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Dec 19 16:48:18 CET 2009 - jengelh@medozas.de
|
|
|
|
- add baselibs.conf as a source
|
|
- enable parallel build
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jan 7 12:34:56 CET 2009 - olh@suse.de
|
|
|
|
- obsolete old -XXbit packages (bnc#437293)
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Aug 22 15:55:23 CEST 2008 - mrueckert@suse.de
|
|
|
|
- update to 2.03
|
|
featuring major speedups for 64-bit architectures like AMD64,
|
|
minor overall speedups, portability enhancements for LLP64
|
|
programming models, and lots of other small improvements
|
|
- dropped lzo-noexec.patch: fix included upstream
|
|
- split out liblzo2-2
|
|
- move the lib to /%_lib
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de
|
|
|
|
- added baselibs.conf file to build xxbit packages
|
|
for multilib support
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Feb 25 06:27:57 CET 2008 - crrodriguez@suse.de
|
|
|
|
- run ldconfig
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Feb 12 16:20:47 CET 2007 - meissner@suse.de
|
|
|
|
- added marker for nonexec stack/heap to i386 assembler.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Sep 27 14:24:04 CEST 2006 - poeml@suse.de
|
|
|
|
- add BuildRequires: gcc-c++ for building on Fedora
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jan 25 21:38:07 CET 2006 - mls@suse.de
|
|
|
|
- converted neededforbuild to BuildRequires
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jan 16 16:02:20 CET 2006 - mrueckert@suse.de
|
|
|
|
- update to version 2.02
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 26 21:36:34 CEST 2005 - mls@suse.de
|
|
|
|
- make devel package require base package
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jun 28 10:59:59 CEST 2005 - cthiel@suse.de
|
|
|
|
- update to version 2.01
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jun 2 11:03:35 CEST 2005 - hvogel@suse.de
|
|
|
|
- update to version 2.0
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jan 9 16:21:11 CET 2004 - adrian@suse.de
|
|
|
|
- move devel files to -devel package
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Aug 20 14:37:01 CEST 2003 - cwh@suse.de
|
|
|
|
- initial release
|
|
|