pool/zziplib
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
zziplib/zziplib.changes

208 lines
7.6 KiB
Plaintext
Raw Normal View History

Accepting request 577665 from home:avindra - Update to 0.13.68: * fix a number of CVEs reported with special *.zip files * minor doc updates referencing GitHub instead of sf.net - drop CVE-2018-6381.patch * merged in a803559fa9194be895422ba3684cf6309b6bb598 - drop CVE-2018-6484.patch * merged in 0c0c9256b0903f664bca25dd8d924211f81e01d3 - drop CVE-2018-6540.patch * merged in 15b8c969df962a444dfa07b3d5bd4b27dc0dbba7 - drop CVE-2018-6542.patch * merged in 938011cd60f5a8a2a16a49e5f317aca640cf4110 OBS-URL: https://build.opensuse.org/request/show/577665 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/zziplib?expand=0&rev=29
2018-02-19 09:26:53 +00:00
-------------------------------------------------------------------
Sun Feb 18 03:25:53 UTC 2018 - avindra@opensuse.org
- Update to 0.13.68:
* fix a number of CVEs reported with special *.zip files
* minor doc updates referencing GitHub instead of sf.net
- drop CVE-2018-6381.patch
* merged in a803559fa9194be895422ba3684cf6309b6bb598
- drop CVE-2018-6484.patch
* merged in 0c0c9256b0903f664bca25dd8d924211f81e01d3
- drop CVE-2018-6540.patch
* merged in 15b8c969df962a444dfa07b3d5bd4b27dc0dbba7
- drop CVE-2018-6542.patch
* merged in 938011cd60f5a8a2a16a49e5f317aca640cf4110
Accepting request 576770 from home:jmoellers:branches:devel:libraries:c_c++ OBS-URL: https://build.opensuse.org/request/show/576770 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/zziplib?expand=0&rev=27
2018-02-15 13:29:28 +00:00
-------------------------------------------------------------------
Wed Feb 14 13:36:43 UTC 2018 - josef.moellers@suse.com
- Changed %license to %doc in SPEC file.
Accepting request 576008 from home:jmoellers:branches:devel:libraries:c_c++ OBS-URL: https://build.opensuse.org/request/show/576008 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/zziplib?expand=0&rev=26
2018-02-13 12:30:53 +00:00
-------------------------------------------------------------------
Mon Feb 12 16:14:31 UTC 2018 - josef.moellers@suse.com
- If the size of the central directory is too big, reject
the file.
Then, if loading the ZIP file fails, display an error message.
[CVE-2018-6542.patch, CVE-2018-6542, bsc#1079094]
Accepting request 573379 from home:jmoellers:branches:devel:libraries:c_c++ OBS-URL: https://build.opensuse.org/request/show/573379 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/zziplib?expand=0&rev=24
2018-02-07 11:37:38 +00:00
-------------------------------------------------------------------
Tue Feb 6 14:55:03 UTC 2018 - josef.moellers@suse.com
- If an extension block is too small to hold an extension,
do not use the information therein.
- If the End of central directory record (EOCD) contains an
Offset of start of central directory which is beyond the end of
the file, reject the file.
[CVE-2018-6540, bsc#1079096, CVE-2018-6540.patch]
Accepting request 571949 from home:jmoellers:branches:devel:libraries:c_c++ OBS-URL: https://build.opensuse.org/request/show/571949 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/zziplib?expand=0&rev=23
2018-02-05 10:50:07 +00:00
-------------------------------------------------------------------
Fri Feb 2 09:31:49 UTC 2018 - josef.moellers@suse.com
- Reject the ZIP file and report it as corrupt if the size of the
central directory and/or the offset of start of central directory
point beyond the end of the ZIP file.
[CVE-2018-6484, boo#1078701, CVE-2018-6484.patch]
-------------------------------------------------------------------
Thu Feb 1 10:49:56 UTC 2018 - josef.moellers@suse.com
- If a file is uncompressed, compressed and uncompressed sizes
should be identical.
[CVE-2018-6381, bsc#1078497, CVE-2018-6381.patch]
Accepting request 568759 from home:scarabeus_iv:branches:devel:libraries:c_c++ - Drop tests as they fail completely anyway, not finding lib needing zip command, this should allow us to kill python dependency - Also drop docs subdir avoiding python dependency for it * The generated xmls were used for mans too but we shipped those only in devel pkg and as such we will live without them - Version update to 0.13.67: * Various fixes found by fuzzing * Merged bellow patches - Remove merged patches: * zziplib-CVE-2017-5974.patch * zziplib-CVE-2017-5975.patch * zziplib-CVE-2017-5976.patch * zziplib-CVE-2017-5978.patch * zziplib-CVE-2017-5979.patch * zziplib-CVE-2017-5981.patch - Switch to github tarball as upstream seem no longer pull it to sourceforge - Remove no longer applying patch zziplib-unzipcat-NULL-name.patch * The sourcecode was quite changed for this to work this way anymore, lets hope this is fixed too OBS-URL: https://build.opensuse.org/request/show/568759 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/zziplib?expand=0&rev=21
2018-01-26 16:23:16 +00:00
-------------------------------------------------------------------
Tue Jan 23 20:18:19 UTC 2018 - tchvatal@suse.com
- Drop tests as they fail completely anyway, not finding lib needing
zip command, this should allow us to kill python dependency
- Also drop docs subdir avoiding python dependency for it
* The generated xmls were used for mans too but we shipped those
only in devel pkg and as such we will live without them
-------------------------------------------------------------------
Tue Jan 23 20:03:01 UTC 2018 - tchvatal@suse.com
- Version update to 0.13.67:
* Various fixes found by fuzzing
* Merged bellow patches
- Remove merged patches:
* zziplib-CVE-2017-5974.patch
* zziplib-CVE-2017-5975.patch
* zziplib-CVE-2017-5976.patch
* zziplib-CVE-2017-5978.patch
* zziplib-CVE-2017-5979.patch
* zziplib-CVE-2017-5981.patch
- Switch to github tarball as upstream seem no longer pull it to
sourceforge
- Remove no longer applying patch zziplib-unzipcat-NULL-name.patch
* The sourcecode was quite changed for this to work this way
anymore, lets hope this is fixed too
Accepting request 538088 from home:pluskalm:branches:devel:libraries:c_c++ - Packaking changes: * Depend on python2 explicitly * Cleanup with spec-cleaner OBS-URL: https://build.opensuse.org/request/show/538088 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/zziplib?expand=0&rev=19
2017-11-06 12:37:57 +00:00
-------------------------------------------------------------------
Wed Nov 1 12:37:02 UTC 2017 - mpluskal@suse.com
- Packaking changes:
* Depend on python2 explicitly
* Cleanup with spec-cleaner
Accepting request 159895 from home:AndreasSchwab:ff - zziplib-largefile.patch: Enable largefile support - Enable debug information OBS-URL: https://build.opensuse.org/request/show/159895 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/zziplib?expand=0&rev=15
2013-03-19 09:04:02 +00:00
-------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/zziplib?expand=0&rev=17
2017-03-23 13:33:15 +00:00
Thu Mar 23 13:32:03 UTC 2017 - josef.moellers@suse.com
- Several bugs fixed:
* heap-based buffer overflows
(bsc#1024517, CVE-2017-5974, zziplib-CVE-2017-5974.patch)
* check if "relative offset of local header" in "central
directory header" really points to a local header
(ZZIP_FILE_HEADER_MAGIC)
(bsc#1024528, CVE-2017-5975, zziplib-CVE-2017-5975.patch)
* protect against bad formatted data in extra blocks
(bsc#1024531, CVE-2017-5976, zziplib-CVE-2017-5976.patch)
* NULL pointer dereference in main (unzzipcat-mem.c)
(bsc#1024532, bsc#1024536, CVE-2017-5975,
zziplib-CVE-2017-5975.patch)
* protect against huge values of "extra field length"
in local file header and central file header
(bsc#1024533, CVE-2017-5978, zziplib-CVE-2017-5978.patch)
* clear ZZIP_ENTRY record before use.
(bsc#1024534, bsc#1024535, CVE-2017-5979, CVE-2017-5977,
zziplib-CVE-2017-5979.patch)
* prevent unzzipcat.c from trying to print a NULL name
(bsc#1024537, zziplib-unzipcat-NULL-name.patch)
* Replace assert() by going to error exit.
(bsc#1034539, CVE-2017-5981, zziplib-CVE-2017-5981.patch)
-------------------------------------------------------------------
Accepting request 159895 from home:AndreasSchwab:ff - zziplib-largefile.patch: Enable largefile support - Enable debug information OBS-URL: https://build.opensuse.org/request/show/159895 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/zziplib?expand=0&rev=15
2013-03-19 09:04:02 +00:00
Sat Mar 16 21:37:21 UTC 2013 - schwab@linux-m68k.org
- zziplib-largefile.patch: Enable largefile support
- Enable debug information
Accepting request 145545 from home:posophe:branches:devel:libraries:c_c++ Update to 0.13.62 version OBS-URL: https://build.opensuse.org/request/show/145545 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/zziplib?expand=0&rev=13
2012-12-15 19:01:02 +00:00
-------------------------------------------------------------------
Sat Dec 15 18:36:24 UTC 2012 - p.drouand@gmail.com
- Update to 0.13.62 version:
* configure.ac: fallback to libtool -export-dynamic unless being sure to
use gnu-ld --export-dynamic. The darwin case is a bit special here
as the c-compiler and linker might be from different worlds.
* Makefile.am: allow nonstaic build
* wrap fd.open like in the Fedora patch
- Remove the package name on summary
- Add dos2unix as build dependencie to fix a wrong file encoding
Accepting request 92481 from home:coolo:removelibtool - add libtool as buildrequire to avoid implicit dependency OBS-URL: https://build.opensuse.org/request/show/92481 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/zziplib?expand=0&rev=11
2011-11-19 20:13:40 +00:00
-------------------------------------------------------------------
Sat Nov 19 15:38:23 UTC 2011 - coolo@suse.com
- add libtool as buildrequire to avoid implicit dependency
Accepting request 84008 from home:jengelh:bl Resubmit of #82503 after adding Obsoletes/Provides (cf. thread on -packaging ML; "<=" is ok with notice) - Implement shlib policy/packaging for package, add baselibs.conf and resolve redundant constructs OBS-URL: https://build.opensuse.org/request/show/84008 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/zziplib?expand=0&rev=9
2011-09-21 07:28:59 +00:00
-------------------------------------------------------------------
Fri Sep 16 16:02:33 UTC 2011 - jengelh@medozas.de
- Implement shlib policy/packaging for package, add baselibs.conf
and resolve redundant constructs
Accepting request 68918 from home:elvigia:branches:devel:libraries:c_c++ - Fix build with gcc 4.6 OBS-URL: https://build.opensuse.org/request/show/68918 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/zziplib?expand=0&rev=7
2011-04-30 19:06:06 +00:00
-------------------------------------------------------------------
Sat Apr 30 15:22:39 UTC 2011 - crrodriguez@opensuse.org
- Fix build with gcc 4.6
Accepting request 32778 from home:dimstar:branches:devel:libraries:c_c++ Copy from home:dimstar:branches:devel:libraries:c_c++/zziplib via accept of submit request 32778 revision 4. Request was accepted with message: thanks OBS-URL: https://build.opensuse.org/request/show/32778 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/zziplib?expand=0&rev=5
2010-02-28 12:30:36 +00:00
-------------------------------------------------------------------
Mon Feb 15 16:43:03 CET 2010 - dimstar@opensuse.org
- Update to version 0.13.58:
+ Some bugs fixed, see ChangeLog
Accepting request 17619 from devel:libraries:c_c++ Copy from devel:libraries:c_c++/zziplib based on submit request 17619 from user coolo OBS-URL: https://build.opensuse.org/request/show/17619 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/zziplib?expand=0&rev=4
2009-08-13 15:39:31 +00:00
-------------------------------------------------------------------
Mon Jul 27 16:24:06 CEST 2009 - coolo@novell.com
- update to version 0.13.56 - fixes many smaller issues
(see Changelog)
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/zziplib?expand=0&rev=3
2009-06-19 22:33:34 +00:00
-------------------------------------------------------------------
Wed Jun 17 10:05:23 CEST 2009 - coolo@novell.com
- fix build with automake 1.11
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/zziplib?expand=0&rev=2
2009-01-27 01:29:32 +00:00
-------------------------------------------------------------------
Mon Jan 26 20:39:14 CET 2009 - crrodriguez@suse.de
- remove "la" files
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/zziplib?expand=0&rev=1
2008-10-25 02:54:35 +00:00
-------------------------------------------------------------------
Fri Oct 24 12:32:13 CEST 2008 - wgottwalt@suse.de
- removed ./msvc7/pkzip.exe and ./msvc8/zip.exe to avoid license
problems
-------------------------------------------------------------------
Wed Aug 15 05:35:45 CEST 2007 - crrodriguez@suse.de
- update to version 0.13.49 fixes #260734 buffer overflow
due to wrong usage of strcpy()
-------------------------------------------------------------------
Thu Mar 29 20:59:38 CEST 2007 - dmueller@suse.de
- adjust buildrequires
-------------------------------------------------------------------
Mon Dec 4 15:10:35 CET 2006 - dmueller@suse.de
- don't build as root
-------------------------------------------------------------------
Tue Oct 3 11:24:24 CEST 2006 - aj@suse.de
- Fix build.
-------------------------------------------------------------------
Fri Aug 18 08:15:46 CEST 2006 - aj@suse.de
- Fix build.
-------------------------------------------------------------------
Mon May 22 13:53:45 CEST 2006 - wgottwalt@suse.de
- initial release
- still problems with the "make check" build option
Reference in New Issue Copy Permalink