From 85fc9779271086e3448ea628b1669851258dc59385925ab8217276d408279bd4 Mon Sep 17 00:00:00 2001 From: Bernhard Wiedemann Date: Sat, 27 Jul 2019 01:28:31 +0000 Subject: [PATCH 1/3] Update to version 1.4.2: * bug: Fix bug in zstd-0.5 decoder by @terrelln (#1696) * bug: Fix seekable decompression in-memory API by @iburinoc (#1695) * bug: Close minor memory leak in CLI by @LeeYoung624 (#1701) * misc: Validate blocks are smaller than size limit by @vivekmig (#1685) * misc: Restructure source files by @ephiepark (#1679) OBS-URL: https://build.opensuse.org/package/show/Archiving/zstd?expand=0&rev=38 --- zstd-1.4.1.tar.gz | 3 --- zstd-1.4.2.tar.gz | 3 +++ zstd.changes | 10 ++++++++++ zstd.spec | 2 +- 4 files changed, 14 insertions(+), 4 deletions(-) delete mode 100644 zstd-1.4.1.tar.gz create mode 100644 zstd-1.4.2.tar.gz diff --git a/zstd-1.4.1.tar.gz b/zstd-1.4.1.tar.gz deleted file mode 100644 index e6666ad..0000000 --- a/zstd-1.4.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:535020867eb3af61fbadfcb402335af7f52dfe44f081ccfa201e961f01751aa0 -size 1895842 diff --git a/zstd-1.4.2.tar.gz b/zstd-1.4.2.tar.gz new file mode 100644 index 0000000..1fa5a80 --- /dev/null +++ b/zstd-1.4.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:12730983b521f9a604c6789140fcb94fadf9a3ca99199765e33c56eb65b643c9 +size 1896786 diff --git a/zstd.changes b/zstd.changes index 3c37042..e1e41e8 100644 --- a/zstd.changes +++ b/zstd.changes @@ -1,3 +1,13 @@ +------------------------------------------------------------------- +Fri Jul 26 13:06:18 UTC 2019 - Bernhard Wiedemann + +- Update to version 1.4.2: + * bug: Fix bug in zstd-0.5 decoder by @terrelln (#1696) + * bug: Fix seekable decompression in-memory API by @iburinoc (#1695) + * bug: Close minor memory leak in CLI by @LeeYoung624 (#1701) + * misc: Validate blocks are smaller than size limit by @vivekmig (#1685) + * misc: Restructure source files by @ephiepark (#1679) + ------------------------------------------------------------------- Mon Jul 22 10:58:28 UTC 2019 - Martin Pluskal diff --git a/zstd.spec b/zstd.spec index 7d65f51..1e8c280 100644 --- a/zstd.spec +++ b/zstd.spec @@ -19,7 +19,7 @@ %define major 1 %define libname lib%{name}%{major} Name: zstd -Version: %{major}.4.1 +Version: %{major}.4.2 Release: 0 Summary: Zstandard compression tools License: BSD-3-Clause AND GPL-2.0-only From da9eb09dc63b7927f326bdb3783836812d56f91fb2b59b984d619c3501c427bb Mon Sep 17 00:00:00 2001 From: Bernhard Wiedemann Date: Tue, 30 Jul 2019 13:43:37 +0000 Subject: [PATCH 2/3] Add disk _constraints to fix ppc64le build OBS-URL: https://build.opensuse.org/package/show/Archiving/zstd?expand=0&rev=40 --- _constraints | 8 ++++++++ zstd.changes | 5 +++++ 2 files changed, 13 insertions(+) create mode 100644 _constraints diff --git a/_constraints b/_constraints new file mode 100644 index 0000000..fb5db1f --- /dev/null +++ b/_constraints @@ -0,0 +1,8 @@ + + + + + 6 + + + diff --git a/zstd.changes b/zstd.changes index e1e41e8..2feaeb3 100644 --- a/zstd.changes +++ b/zstd.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Tue Jul 30 13:43:02 UTC 2019 - Bernhard Wiedemann + +- Add disk _constraints to fix ppc64le build + ------------------------------------------------------------------- Fri Jul 26 13:06:18 UTC 2019 - Bernhard Wiedemann From 95b421da8638c091366bbf6fca0df30163c467be31f871dcb002df6bca75694a Mon Sep 17 00:00:00 2001 From: Bernhard Wiedemann Date: Fri, 2 Aug 2019 09:16:34 +0000 Subject: [PATCH 3/3] add CVE to 1.3.8 changelog: * fix race condition in one-pass compression functions that could allow out of bounds write (CVE-2019-11922, boo#1142941) OBS-URL: https://build.opensuse.org/package/show/Archiving/zstd?expand=0&rev=41 --- zstd.changes | 2 ++ 1 file changed, 2 insertions(+) diff --git a/zstd.changes b/zstd.changes index 2feaeb3..b34f27c 100644 --- a/zstd.changes +++ b/zstd.changes @@ -95,6 +95,8 @@ Sat Jan 5 13:57:58 UTC 2019 - astieger@suse.com * support ZSTD_CLEVEL environment variable * --no-progress flag, preserving final summary * various CLI fixes + * fix race condition in one-pass compression functions that could + allow out of bounds write (CVE-2019-11922, boo#1142941) ------------------------------------------------------------------- Wed Oct 24 08:29:38 UTC 2018 - astieger@suse.com