public inbox for development@lists.ipfire.org
 help / color / mirror / Atom feed
From: Adolf Belka <adolf.belka@ipfire.org>
To: development@lists.ipfire.org
Subject: [PATCH] bzip2: Update to 1.0.8
Date: Mon, 29 Mar 2021 13:44:14 +0200	[thread overview]
Message-ID: <20210329114414.3758190-1-adolf.belka@ipfire.org> (raw)

[-- Attachment #1: Type: text/plain, Size: 1906 bytes --]

- Update from 1.0.6 to 1.0.8
- Update of rootfile
- Changelog
   1.0.8 (13 Jul 19)
    * Accept as many selectors as the file format allows.
      This relaxes the fix for CVE-2019-12900 from 1.0.7
      so that bzip2 allows decompression of bz2 files that
      use (too) many selectors again.
    * Fix handling of large (> 4GB) files on Windows.
    * Cleanup of bzdiff and bzgrep scripts so they don't use
      any bash extensions and handle multiple archives correctly.
    * There is now a bz2-files testsuite at
      https://sourceware.org/git/bzip2-tests.git
   1.0.7 (27 Jun 19)
    * Fix undefined behavior in the macros SET_BH, CLEAR_BH, & ISSET_BH
    * bzip2: Fix return value when combining --test,-t and -q.
    * bzip2recover: Fix buffer overflow for large argv[0]
    * bzip2recover: Fix use after free issue with outFile (CVE-2016-3189)
    * Make sure nSelectors is not out of range (CVE-2019-12900)

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 config/rootfiles/common/bzip2 | 2 +-
 lfs/bzip2                     | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/config/rootfiles/common/bzip2 b/config/rootfiles/common/bzip2
index f6ad610d4..9a8e88148 100644
--- a/config/rootfiles/common/bzip2
+++ b/config/rootfiles/common/bzip2
@@ -2,7 +2,7 @@ bin/bunzip2
 bin/bzcat
 bin/bzip2
 lib/libbz2.so.1.0
-lib/libbz2.so.1.0.6
+lib/libbz2.so.1.0.8
 usr/bin/bunzip2
 usr/bin/bzcat
 usr/bin/bzcmp
diff --git a/lfs/bzip2 b/lfs/bzip2
index da20ce68c..9c6f9c5a4 100644
--- a/lfs/bzip2
+++ b/lfs/bzip2
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.0.6
+VER        = 1.0.8
 
 THISAPP    = bzip2-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_MD5 = 00b516f4704d4a7cb50a1d97e6e8e15b
+$(DL_FILE)_MD5 = 67e051268d0c475ea773822f7500d0e5
 
 install : $(TARGET)
 
-- 
2.31.0


                 reply	other threads:[~2021-03-29 11:44 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20210329114414.3758190-1-adolf.belka@ipfire.org \
    --to=adolf.belka@ipfire.org \
    --cc=development@lists.ipfire.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox