File unzip-rcc.changes of Package unzip
378
1
-------------------------------------------------------------------
2
Thu Oct 11 13:08:53 UTC 2018 - kstreitova@suse.com
3
4
- Add unzip60-cfactorstr_overflow.patch to fix buffer overflow in
5
list.c [bsc#1110194] [CVE-2018-18384]
6
7
-------------------------------------------------------------------
8
Wed Jun 27 11:40:35 UTC 2018 - kstreitova@suse.com
9
10
- Add unzip60-total_disks_zero.patch that fixes a bug when unzip is
11
unable to process Windows zip64 archives because Windows
12
archivers set total_disks field to 0 but per standard, valid
13
values are 1 and higher [bnc#910683]
14
- Add Fix-CVE-2014-9636-unzip-buffer-overflow.patch to fix heap
15
overflow for STORED field data [bnc#914442] [CVE-2014-9636]
16
17
-------------------------------------------------------------------
18
Thu Feb 8 14:11:25 UTC 2018 - kbabioch@suse.com
19
20
- Add CVE-2018-1000035.patch: Fix a heap-based buffer overflow in
21
password protected ZIP archives (CVE-2018-1000035 bsc#1080074)
22
23
-------------------------------------------------------------------
24
Thu Jul 6 13:25:44 UTC 2017 - nico.kruber@gmail.com
25
26
- Updated Fix-CVE-2014-8139-unzip.patch: the original patch was
27
causing errors testing valid jar files:
28
$ unzip -t foo.jar
29
Archive: foo.jar
30
testing: META-INF/ bad extra-field entry:
31
EF block length (0 bytes) invalid (< 4)
32
testing: META-INF/MANIFEST.MF OK
33
testing: foo OK
34
(see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8139
35
where the updated patch was taken from)
36
37
-------------------------------------------------------------------
38
Wed Feb 15 08:31:05 UTC 2017 - josef.moellers@suse.com
39
40
- Fixed two potential buffer overflows.
41
The patches were extracted from
42
http://antinode.info/ftp/info-zip/unzip60/zipinfo.c and
43
http://antinode.info/ftp/info-zip/unzip60/list.c
44
(bsc#1013992, bsc#1013993, CVE-2016-9844, CVE-2014-9913,
45
CVE-2016-9844.patch, CVE-2014-9913.patch)
46
47
-------------------------------------------------------------------
48
Wed Oct 12 07:23:03 UTC 2016 - josef.moellers@suse.com
49
50
- When decrypting an encrypted file,
51
quit early if compressed size < HEAD_LEN.
52
When extracting avoid an infinite loop
53
if a file never finishes unzipping.
54
(bsc#950110, bsc#950111, CVE-2015-7696, CVE-2015-7697,
55
CVE-2015-7696.patch, CVE-2015-7697.patch)
56
57
-------------------------------------------------------------------
58
Thu Jun 16 14:58:41 UTC 2016 - tchvatal@suse.com
59
60
- Require properly the update-alternatives to not throw out errors
61
when installing in OBS chroot
62
63
-------------------------------------------------------------------
64
Mon Jan 26 13:25:54 UTC 2015 - tbehrens@suse.com
65
66
- Add Fix-CVE-2014-8139-unzip.patch: fix heap overflow condition in
67
the CRC32 verification (fixes bnc#909214)
68
- Add Fix-CVE-2014-8140-and-CVE-2014-8141.patch: fix write error
69
(*_8349_*) shows a problem in extract.c:test_compr_eb(), and:
70
read errors (*_6430_*, *_3422_*) show problems in
71
process.c:getZip64Data() (fixes bnc#909214)
72
73
-------------------------------------------------------------------
74
Sun Dec 21 13:43:32 UTC 2014 - meissner@suse.com
75
76
- build with PIE
77
78
-------------------------------------------------------------------
79
Fri Aug 2 18:29:07 UTC 2013 - coolo@suse.com
80
81
- fix defaultattr for old distros
82
83
-------------------------------------------------------------------
84
Fri Aug 2 13:55:08 UTC 2013 - coolo@suse.com
85
86
- split the rcc dependency into a spec file of it's own, we don't
87
need that complexity during build causing cycles like this:
88
unzip -> librcc -> libproxy -> libXau -> xorg-x11-proto-devel -> docbook-xsl-stylesheets
89
90
-------------------------------------------------------------------
91
Fri Apr 5 10:07:44 UTC 2013 - idonmez@suse.com
92
93
- Cleanup spec file
94
- Add Source URL, see https://en.opensuse.org/SourceUrls
95
96
-------------------------------------------------------------------
97
Fri Aug 5 13:57:24 CEST 2011 - pth@suse.de
98
99
- Don't call isprint (bnc#620483).
100
101
-------------------------------------------------------------------
102
Mon May 23 14:21:44 UTC 2011 - lnussel@suse.de
103
104
- remove use of __DATE__ from correct file
105
106
-------------------------------------------------------------------
107
Sat May 07 23:16:45 UTC 2011 - idoenmez@novell.com
108
109
- Sync our compile time flags with Debian except Acorn stuff, this enables
110
UTF-8, saves an unrelated warning about lchmod being not implemented.
111
- Enable make check
112
113
-------------------------------------------------------------------
114
Fri Jan 28 13:50:13 UTC 2011 - lnussel@suse.de
115
116
- use dlopen for librcc0. A direct requires causes lots of other
117
packages to get installed such as aspell which bloats a minimal
118
install.
119
120
-------------------------------------------------------------------
121
Mon Aug 30 19:44:17 UTC 2010 - cristian.rodriguez@opensuse.org
122
123
- Do not include build host specific info like build dates In
124
binaries.
125
126
-------------------------------------------------------------------
127
Fri Jun 25 18:21:34 CEST 2010 - pth@suse.de
128
129
- Doing open(O_WRONLY) and then fdopen("w+") will now fail with
130
"Invalid Argument" whereas former glibcs would succeed. So now
131
do open(O_RDWR).
132
- Print error message when open(2) fails.
133
- Add debugging traces in open_outfile.
134
135
-------------------------------------------------------------------
136
Fri May 21 16:39:24 CEST 2010 - pth@suse.de
137
138
- Update to 6.0:
139
* Support PKWARE ZIP64 extensions, allowing Zip archives and Zip archive
140
entries larger than 4 GiBytes and more than 65536 entries within a
141
single Zip archive. This support is currently only available for Unix,
142
OpenVMS and Win32/Win64.
143
* Support for bzip2 compression method.
144
* Support for UTF-8 encoded entry names, both through PKWARE's "General
145
Purpose Flags Bit 11" indicator and Info-ZIP's new "up" unicode path
146
extra field. (Currently, on Windows the UTF-8 handling is limited to
147
the character subset contained in the configured non-unicode "system
148
code page".)
149
* Fixed "Time of Creation/Time of Use" vulnerability when setting
150
attributes of extracted files, for Unix and Unix-like ports.
151
* Fixed memory leak when processing invalid deflated data.
152
* Fixed long-standing bug in unshrink (partial_clear), added boundary
153
checks against invalid compressed data.
154
* On Unix, keep inherited SGID attribute bit for extracted directories
155
unless restoration of owner/group id or SUID/SGID/Tacky attributes was
156
requested.
157
* On Unix, allow extracted filenames to contain embedded control
158
characters when explicitly requested by specifying the new command line
159
option "-^".
160
* On Unix, support restoration of symbolic link attributes.
161
* On Unix, support restoration of 32-bit UID/GID data using the new "ux"
162
IZUNIX3 extra field introduced with Zip 3.0.
163
* Support symbolic links zipped up on VMS.
164
* New -D option to suppress restoration of timestamps for extracted
165
directory entries (on those ports that support setting of directory
166
timestamps). By specifying "-DD", this new option also allows to
167
suppress timestamp restoration for ALL extracted files on all UnZip
168
ports which support restoration of timestamps. On VMS, the default
169
behaviour is now to skip restoration of directory timestamps; here,
170
"--D" restores ALL timestamps, "-D" restores none.
171
* On OS/2, Win32, and Unix, the (previously optional) feature UNIXBACKUP
172
to allow saving backup copies of overwritten files on extraction is now
173
enabled by default.
174
175
-------------------------------------------------------------------
176
Mon May 10 16:39:20 UTC 2010 - pth@suse.de
177
178
- Use librcc to convert russian/slavic file names (bnc#540598).
179
180
-------------------------------------------------------------------
181
Sun Dec 6 17:51:30 CET 2009 - jengelh@.medozas.de
182
183
- enable parallel building
184
185
-------------------------------------------------------------------
186
Tue Dec 9 15:53:53 CET 2008 - schwab@suse.de
187
188
- Fix last change.
189
190
-------------------------------------------------------------------
191
Mon Sep 15 12:32:57 CEST 2008 - ro@suse.de
192
193
- use hardlink instead of softlink
194
195
-------------------------------------------------------------------
196
Mon Feb 4 13:29:27 CET 2008 - pth@suse.de
197
198
- Add patch to fix erroneous freeing of buffers (bnc#358425)
199
200
-------------------------------------------------------------------
201
Fri Dec 7 12:52:06 CET 2007 - pth@suse.de
202
203
- Pass file mode when calling open with O_CREAT.
204
205
-------------------------------------------------------------------
206
Mon Dec 3 13:24:27 CET 2007 - pth@suse.de
207
208
- Add patch to extend the maximum file/archive size to 2^32-8193
209
(4294959103) bytes.
210
- Add patch to fix CVE-2005-2475 (bnc#274156)
211
212
-------------------------------------------------------------------
213
Thu Jun 21 17:34:10 CEST 2007 - adrian@suse.de
214
215
- fix changelog entry order
216
217
-------------------------------------------------------------------
218
Thu May 3 15:25:39 CEST 2007 - pth@suse.de
219
220
- Add patch from Takashi Iwai that adds a new option (-S) to
221
unzip and infozip that disables file name translation (bnc#267901).
222
- Recompress tarball with bzip2
223
224
-------------------------------------------------------------------
225
Fri Jan 27 02:30:41 CET 2006 - mls@suse.de
226
227
- converted neededforbuild to BuildRequires
228
229
-------------------------------------------------------------------
230
Thu Jan 26 15:28:44 CET 2006 - pth@suse.de
231
232
- Reject file names that are too long (bnc#140304)
233
- Use stack protector.
234
235
-------------------------------------------------------------------
236
Fri Jan 20 17:41:23 CET 2006 - schwab@suse.de
237
238
- Don't strip binaries.
239
240
-------------------------------------------------------------------
241
Thu Dec 15 11:31:51 CET 2005 - pth@suse.de
242
243
- Compile with (limited) large file support. This will support
244
single files exceeding 2 GB as long as the archive stays below
245
that theshold.
246
247
-------------------------------------------------------------------
248
Mon Jun 13 22:46:31 CEST 2005 - rommel@suse.de
249
250
- update to version 5.52 (bnc#67279)
251
252
-------------------------------------------------------------------
253
Sat Aug 7 15:03:23 CEST 2004 - rommel@suse.de
254
255
- update to version 5.51
256
(fixes old security bugs, adds PKWARE's compression code Deflate64)
257
258
-------------------------------------------------------------------
259
Wed May 19 18:36:21 CEST 2004 - ro@suse.de
260
261
- added -fno-strict-aliasing
262
- really use RPM_OPT_FLAGS
263
264
-------------------------------------------------------------------
265
Sun Jan 11 13:00:23 CET 2004 - adrian@suse.de
266
267
- build as user
268
269
-------------------------------------------------------------------
270
Tue Sep 23 16:53:44 CEST 2003 - rommel@suse.de
271
272
- replaced fix for ../ exploit with a fix both for
273
the ../ exploit and '/' exploit (Bugzilla #29311)
274
275
-------------------------------------------------------------------
276
Thu Jul 3 12:57:38 CEST 2003 - rommel@suse.de
277
278
- added fix for ../ exploit (Bugzilla #27667)
279
280
-------------------------------------------------------------------
281
Fri Jan 17 14:42:19 CET 2003 - rommel@suse.de
282
283
- fixed Summary: to be more verbose about what this package does
284
285
-------------------------------------------------------------------
286
Wed Sep 18 00:57:21 CEST 2002 - ro@suse.de
287
288
- removed bogus self-provides
289
290
-------------------------------------------------------------------
291
Fri Jul 5 11:09:32 CEST 2002 - kukuk@suse.de
292
293
- Use %ix86 macro
294
295
-------------------------------------------------------------------
296
Mon Mar 11 2002 - rommel@suse.de
297
298
- Update to 5.50
299
- took over parts of pmladek's patch (see below)
300
301
-------------------------------------------------------------------
302
Thu Jan 24 13:43:46 CET 2002 - grimmer@suse.de
303
304
- added unzip-5.42-iso8859_2.patch to fix coding conversion
305
between Microsoft and Linux file names
306
(originally from http://www.axis.cz/linux/zip_unzip.php3,
307
enhanced to support both ISO8859-1 and ISO8859-2 by Petr Mladek
308
<pmladek@suse.cz>)
309
310
-------------------------------------------------------------------
311
Mon Apr 9 13:42:07 CEST 2001 - grimmer@suse.de
312
313
- Update to 5.42
314
- file list fixes (new license file, documentation renames)
315
316
-------------------------------------------------------------------
317
Wed Dec 13 17:49:59 CET 2000 - grimmer@suse.de
318
319
- Update to 5.41 (now includes decryption support)
320
- now Provides and Obsoletes crunzip
321
- bzipped sources
322
- use BuildRoot
323
324
-------------------------------------------------------------------
325
Tue Feb 29 18:33:38 CET 2000 - schwab@suse.de
326
327
- Add support for ia64.
328
- /usr/man -> /usr/share/man
329
330
-------------------------------------------------------------------
331
Wed Dec 22 16:19:18 MET 1999 - grimmer@suse.de
332
333
- Added "Conflicts: crzip" to spec file
334
- cleaned up Provides: tag
335
336
-------------------------------------------------------------------
337
Fri Dec 17 16:40:10 MET 1999 - grimmer@suse.de
338
339
- Spec file cleanups
340
341
-------------------------------------------------------------------
342
Sat Nov 27 15:03:07 MET 1999 - kukuk@suse.de
343
344
- Use linux_noasm Makefile target on SPARC
345
346
-------------------------------------------------------------------
347
Mon Sep 13 17:23:57 CEST 1999 - bs@suse.de
348
349
- ran old prepare_spec on spec file to switch to new prepare_spec.
350
351
-------------------------------------------------------------------
352
Wed Sep 8 16:34:57 CEST 1999 - uli@suse.de
353
354
- uses target linux_noasm for PPC
355
356
-------------------------------------------------------------------
357
Wed Feb 24 09:42:16 MET 1999 - grimmer@suse.de
358
359
- new version (5.40)
360
- specfile modifications
361
- added french description
362
363
-------------------------------------------------------------------
364
Mon Jan 11 14:29:14 MET 1999 - ro@suse.de
365
366
- use target linux_noasm for alpha
367
368
-------------------------------------------------------------------
369
Fri Jan 23 15:03:52 MET 1998 - rj@suse.de
370
371
- version 5.32
372
-------------------------------------------------------------------
373
Thu Feb 6 11:56:09 CET 1997 - rj@suse.de
374
375
- version 5.12
376
- new test/changes/plist files
377
378