File xz.changes of Package xz
xxxxxxxxxx
1
-------------------------------------------------------------------
2
Thu Apr 7 13:31:17 UTC 2022 - Danilo Spinella <danilo.spinella@suse.com>
3
4
- Fix ZDI-CAN-16587 Fix escaping of malicious filenames
5
(ZDI-CAN-16587 bsc#1198062 CVE-2022-1271)
6
* bsc1198062.patch
7
8
-------------------------------------------------------------------
9
Tue May 21 13:12:53 UTC 2019 - Kristýna Streitová <kstreitova@suse.com>
10
11
- add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
12
xz, xzdec, lzmadec, documentation, translated messages, tests,
13
debug, extra directory) are in public domain licence [bsc#1135709]
14
15
-------------------------------------------------------------------
16
Mon Mar 19 15:41:58 CET 2018 - kukuk@suse.de
17
18
- Use %license instead of %doc [bsc#1082318]
19
20
-------------------------------------------------------------------
21
Mon Jul 10 10:50:01 UTC 2017 - jengelh@inai.de
22
23
- % needs to be encoded in description; adjust weird indent there
24
as well. Expand LZMA in summaries.
25
26
-------------------------------------------------------------------
27
Fri Jun 30 18:25:33 UTC 2017 - olaf@aepfle.de
28
29
- Really use the selfdefined CFLAGS during build to fix build
30
31
-------------------------------------------------------------------
32
Sun Jun 25 11:37:03 UTC 2017 - astieger@suse.com
33
34
- fix CentOS/RHEL builds after clean-up
35
36
-------------------------------------------------------------------
37
Wed Jun 21 14:11:44 UTC 2017 - mpluskal@suse.com
38
39
- Simplify spec file conditions
40
- Clenup profiled building
41
- Use full lists of files
42
43
-------------------------------------------------------------------
44
Tue Feb 21 09:03:18 UTC 2017 - adrian@suse.de
45
46
- enable static package by default.
47
Needed for AppImageKit
48
49
-------------------------------------------------------------------
50
Sat Dec 31 22:17:33 UTC 2016 - astieger@suse.com
51
52
- xz 5.2.3:
53
* xz: always close a file before trying to delete it to avoid
54
problems on some operating system and file system combinations.
55
* C99/C11 conformance fixes to liblzma. The issues affected at
56
least some builds using link-time optimizations.
57
* Fixed bugs in the rarely-used function lzma_index_dup().
58
* Use of external SHA-256 code is now disabled by default.
59
It can still be enabled by passing --enable-external-sha256
60
* Changed CPU core count detection to use sched_getaffinity() on
61
GNU/Linux and GNU/kFreeBSD.
62
* Fixes to the build-system
63
64
-------------------------------------------------------------------
65
Sun Mar 13 09:40:51 UTC 2016 - mpluskal@suse.com
66
67
- Install xznew with correct permissions (boo#970842)
68
69
-------------------------------------------------------------------
70
Sun Feb 14 09:21:33 UTC 2016 - tchvatal@suse.com
71
72
- Do not split out lang_package conditional, used in sle10 out of support
73
74
-------------------------------------------------------------------
75
Tue Nov 10 14:34:14 UTC 2015 - hpj@urpla.net
76
77
- fix conversion: spell the missed parts correctly
78
79
-------------------------------------------------------------------
80
Sun Nov 8 13:09:53 UTC 2015 - hpj@urpla.net
81
82
- add xznew{,.1}, converted from bznew
83
84
-------------------------------------------------------------------
85
Tue Sep 29 21:28:21 UTC 2015 - astieger@suse.com
86
87
- xz 5.2.2:
88
* Omitted the use of pipe2() even if it is available to avoid
89
portability issues with some old Linux and glibc combinations
90
* Updated German translation
91
* Documented that threaded decompression is not implemented yet
92
93
-------------------------------------------------------------------
94
Fri Feb 27 18:48:48 UTC 2015 - astieger@suse.com
95
96
- xz 5.2.1:
97
* Fixed a compression-ratio regression in fast mode of LZMA1 and
98
LZMA2.
99
100
-------------------------------------------------------------------
101
Wed Jan 21 11:21:32 UTC 2015 - rguenther@suse.com
102
103
- Avoid running configure twice and using -fprofile-generate or
104
-fprofile-use for compiling configure tests when profiling.
105
106
-----------------------------------------------------------------
107
Thu Dec 25 20:23:28 UTC 2014 - andreas.stieger@gmx.de
108
109
- xz 5.2.0:
110
* liblzma:
111
- Added support for multi-threaded compression
112
- Made the uses of lzma_allocator const correct.
113
- Added lzma_block_uncomp_encode() to create uncompressed
114
.xz Blocks using LZMA2 uncompressed chunks.
115
- Added support for LZMA_IGNORE_CHECK.
116
- A few speed optimizations were made.
117
- Added support for symbol versioning. It is enabled by default
118
on GNU/Linux, other GNU-based systems, and FreeBSD.
119
* xz:
120
- Fixed a race condition in the signal handling
121
- Multi-threaded decompression can be enabled with the
122
--threads (-T) option.
123
- New command line options in xz: --single-stream,
124
--block-size=SIZE, --block-list=SIZES,
125
--flush-timeout=TIMEOUT, and --ignore-check.
126
- xz -lvv now shows the minimum xz version that is required to
127
decompress the file. Currently it is 5.0.0 for all supported
128
.xz files except files with empty LZMA2 streams require 5.0.2.
129
* xzdiff and xzgrep now support .lzo files if lzop is installed.
130
The .tzo suffix is also recognized as a shorthand for .tar.lzo.
131
132
-------------------------------------------------------------------
133
Thu Dec 25 20:17:06 UTC 2014 - andreas.stieger@gmx.de
134
135
- xz 5.0.8:
136
* Fixed an old bug in xzgrep that affected OpenBSD and probably
137
a few other operating systems too.
138
* Updated French and German translations.
139
* Minor build system update
140
141
-------------------------------------------------------------------
142
Fri Dec 19 09:43:36 UTC 2014 - meissner@suse.com
143
144
- build with PIE support.
145
146
-------------------------------------------------------------------
147
Thu Dec 18 19:37:09 UTC 2014 - crrodriguez@opensuse.org
148
149
- Build XZ with full RELRO.
150
151
-------------------------------------------------------------------
152
Tue Sep 23 00:11:27 UTC 2014 - andreas.stieger@gmx.de
153
154
- xz 5.0.7:
155
* Fix regressions introduced in 5.0.6:
156
- Fix building with non-GNU make.
157
- Fix invalid Libs.private value in liblzma.pc which broke
158
static linking against liblzma if the linker flags were
159
taken from pkg-config.
160
- include changes from 5.0.6:
161
* xzgrep now exits with status 0 if at least one file matched.
162
* A few minor portability and build system fixes
163
164
-------------------------------------------------------------------
165
Sun Nov 24 16:25:53 UTC 2013 - andreas.stieger@gmx.de
166
167
- add optional -static-devel library package, intended to publish pixz for
168
CentOS / RHEL, default off
169
170
-------------------------------------------------------------------
171
Wed Oct 16 08:53:16 UTC 2013 - mvyskocil@suse.com
172
173
- Use gzipped archive to prevent a build cycle on older targets
174
* http://lists.opensuse.org/opensuse-buildservice/2013-10/msg00079.html
175
- Add a signature and keyring file for source verification
176
* not enable in spec due bootstrapping issues
177
178
-------------------------------------------------------------------
179
Tue Jul 16 13:52:16 UTC 2013 - idonmez@suse.com
180
181
- Update to version 5.0.5
182
* lzmadec and liblzma's lzma_alone_decoder(): Support decompressing
183
.lzma files that have less common settings in the headers
184
(dictionary size other than 2^n or 2^n + 2^(n-1), or uncompressed
185
size greater than 256 GiB).
186
* xz:
187
- Fixes and improvements to error handling.
188
- Various fixes to the man page.
189
* xzless: Fixed to work with "less" versions 448 and later
190
* xzgrep: Made -h an alias for --no-filename.
191
192
-------------------------------------------------------------------
193
Tue Jan 29 17:28:51 UTC 2013 - guillaume@opensuse.org
194
195
- Disable profiling for aarch64 arch
196
197
-------------------------------------------------------------------
198
Tue Nov 27 11:10:13 UTC 2012 - sweet_f_a@gmx.de
199
200
- Update to version 5.0.4
201
* liblzma:
202
- Fix lzma_index_init(). It could crash if memory allocation
203
failed.
204
- Fix the possibility of an incorrect LZMA_BUF_ERROR when a BCJ
205
filter is used and the application only provides exactly as
206
much output space as is the uncompressed size of the file.
207
- Fix a bug in doc/examples_old/xz_pipe_decompress.c. It didn't
208
check if the last call to lzma_code() really returned
209
LZMA_STREAM_END, which made the program think that truncated
210
files are valid.
211
- New example programs in doc/examples (old programs are now in
212
doc/examples_old). These have more comments and more detailed
213
error handling.
214
* Fix "xz -lvv foo.xz". It could crash on some corrupted files.
215
* Fix output of "xz --robot -lv" and "xz --robot -lvv" which
216
incorrectly printed the filename also in the "foo (x/x)" format.
217
* Fix exit status of "xzdiff foo.xz bar.xz".
218
* Fix exit status of "xzgrep foo binary_file".
219
* Fix portability to EBCDIC systems.
220
* Fix a configure issue on AIX with the XL C compiler. See INSTALL
221
for details.
222
* Update French, German, Italian, and Polish translations
223
224
-------------------------------------------------------------------
225
Sun Jul 29 17:52:57 UTC 2012 - jengelh@inai.de
226
227
- Disable profiling on SPARC due to compiler bug [gcc #54121]
228
229
-------------------------------------------------------------------
230
Fri Jul 6 10:18:06 UTC 2012 - sweet_f_a@gmx.de
231
232
- correct license "LGPL-2.1+ and GPL-2.0+" (bnc#770195)
233
234
-------------------------------------------------------------------
235
Sun Feb 12 23:37:44 UTC 2012 - crrodriguez@opensuse.org
236
237
- Put libraries back in %{_libdir}, /usr merge project.
238
239
-------------------------------------------------------------------
240
Sun Oct 9 15:25:02 UTC 2011 - sweet_f_a@gmx.de
241
242
- rewrite last broken arm portability changes
243
244
-------------------------------------------------------------------
245
Fri Sep 30 20:31:59 UTC 2011 - crrodriguez@opensuse.org
246
247
- Fix build in armv5el doesnt like profiling
248
249
-------------------------------------------------------------------
250
Tue Sep 27 13:05:34 UTC 2011 - sweet_f_a@gmx.de
251
252
- minor fixes of last portability changes:
253
* decouple do_profiling and lang_package again
254
* don't define do_factory, just use lang_package instead
255
* simplify files section
256
* do_profiling for some more systems
257
258
-------------------------------------------------------------------
259
Mon Sep 26 15:59:51 UTC 2011 - coolo@suse.com
260
261
- build on SLE_10
262
263
-------------------------------------------------------------------
264
Sat Sep 17 15:19:50 UTC 2011 - coolo@suse.com
265
266
- remove _service, too fragile
267
268
-------------------------------------------------------------------
269
Fri Sep 16 16:37:32 UTC 2011 - jengelh@medozas.de
270
271
- Add xz-devel to baselibs
272
- Remove redundant sections
273
274
-------------------------------------------------------------------
275
Tue Jun 14 18:04:53 CEST 2011 - dmueller@suse.de
276
277
- add recommends xz-lang
278
279
-------------------------------------------------------------------
280
Wed Jun 8 19:25:51 UTC 2011 - coolo@novell.com
281
282
- Update to version 5.0.3
283
* liblzma fixes:
284
285
- A memory leak was fixed.
286
287
- lzma_stream_buffer_encode() no longer creates an empty .xz
288
Block if encoding an empty buffer. Such an empty Block with
289
LZMA2 data would trigger a bug in 5.0.1 and older (see the
290
first bullet point in 5.0.2 notes). When releasing 5.0.2,
291
I thought that no encoder creates this kind of files but
292
I was wrong.
293
294
- Validate function arguments better in a few functions. Most
295
importantly, specifying an unsupported integrity check to
296
lzma_stream_buffer_encode() no longer creates a corrupt .xz
297
file. Probably no application tries to do that, so this
298
shouldn't be a big problem in practice.
299
300
- Document that lzma_block_buffer_encode(),
301
lzma_easy_buffer_encode(), lzma_stream_encoder(), and
302
lzma_stream_buffer_encode() may return LZMA_UNSUPPORTED_CHECK.
303
304
- The return values of the _memusage() functions are now
305
documented better.
306
307
* Fix command name detection in xzgrep. xzegrep and xzfgrep now
308
correctly use egrep and fgrep instead of grep.
309
310
* French translation was added.
311
312
-------------------------------------------------------------------
313
Thu Apr 7 20:43:05 UTC 2011 - crrodriguez@opensuse.org
314
315
- Update to version 5.0.2
316
* LZMA2 decompressor now correctly accepts LZMA2 streams with no
317
uncompressed data. Previously it considered them corrupt. The
318
bug can affect applications that use raw LZMA2 streams. It is
319
very unlikely to affect .xz files because no compressor creates
320
.xz files with empty LZMA2 streams. (Empty .xz files are a
321
different thing than empty LZMA2 streams.)
322
323
* "xz --suffix=.foo filename.foo" now refuses to compress the
324
file due to it already having the suffix .foo. It was already
325
documented on the man page, but the code lacked the test.
326
327
* "xzgrep -l foo bar.xz" works now.
328
329
* Polish translation was added.
330
331
-------------------------------------------------------------------
332
Fri Mar 4 17:54:21 UTC 2011 - crrodriguez@opensuse.org
333
334
- Update to version 5.0.1
335
* Fix --force on setuid/setgid/sticky and multi-hardlink files.
336
* Add alloc_size and malloc attributes to a few functions.
337
* Fix gzip and bzip2 support in xzdiff
338
339
-------------------------------------------------------------------
340
Tue Dec 7 18:47:04 UTC 2010 - cristian.rodriguez@opensuse.org
341
342
- Use compiler profile information, makes xz marginally faster
343
(around 1-2 secs)
344
345
-------------------------------------------------------------------
346
Sat Oct 30 20:17:49 UTC 2010 - jengelh@medozas.de
347
348
- Use %_smp_mflags
349
350
-------------------------------------------------------------------
351
Thu Oct 28 09:18:47 UTC 2010 - coolo@novell.com
352
353
- adapt baselibs.conf
354
355
-------------------------------------------------------------------
356
Wed Oct 27 00:28:26 UTC 2010 - cristian.rodriguez@opensuse.org
357
358
- Update to 5.0.0 final
359
* The major soname has been bumped to 5.0.0. liblzma API and ABI
360
are now stable.
361
* The memory usage limit is now disabled by default
362
* Added support for XZ_DEFAULTS environment variable
363
* The compression settings associated with the preset levels
364
have been changed,they are now less likely to make compression worse.
365
* Support for "xz --list" was added
366
367
-------------------------------------------------------------------
368
Sat Apr 24 11:38:25 UTC 2010 - coolo@novell.com
369
370
- buildrequire pkg-config to fix provides
371
372
-------------------------------------------------------------------
373
Sat Dec 12 18:40:53 CET 2009 - jengelh@medozas.de
374
375
- add baselibs.conf as a source
376
377
-------------------------------------------------------------------
378
Fri Sep 4 11:53:41 CEST 2009 - coolo@novell.com
379
380
- update to 4.999.9beta
381
* only some polishment above the git snapshot I took
382
383
-------------------------------------------------------------------
384
Sun Aug 23 14:50:09 CEST 2009 - coolo@novell.com
385
386
- borrow %check section from fedora spec
387
388
-------------------------------------------------------------------
389
Thu Aug 20 15:51:47 CEST 2009 - coolo@novell.com
390
391
- update to latest git (5.0 still not released)
392
* a xz man page (bnc#505969)
393
* fix data corruption in LZ/LZMA2 encoder.
394
* major documentation update
395
* install lzdiff, lzgrep, and lzmore as symlinks
396
* make the default memory usage limit 40 % of RAM for both
397
compressing and decompressing.
398
* fixed a crash in liblzma
399
See git://ctrl.tukaani.org/xz.git for more
400
401
-------------------------------------------------------------------
402
Sun Jun 7 19:39:45 CEST 2009 - crrodriguez@suse.de
403
404
- remove static libraries, see bnc#509945 for details
405
406
-------------------------------------------------------------------
407
Sun Feb 22 18:37:26 CET 2009 - ro@suse.de
408
409
- added baselibs.conf (for rpm-32bit)
410
411
-------------------------------------------------------------------
412
Mon Feb 16 10:59:51 CET 2009 - coolo@suse.de
413
414
- use bzip payload, so users are able to install new rpm on old systems
415
416
-------------------------------------------------------------------
417
Wed Feb 11 12:44:41 CET 2009 - coolo@suse.de
418
419
- fix devel symlink
420
421
-------------------------------------------------------------------
422
Fri Feb 6 13:50:53 CET 2009 - schwab@suse.de
423
424
- Update to xz-4.999.8beta.
425
See git://ctrl.tukaani.org/lzma-utils.git.
426
427
-------------------------------------------------------------------
428
Wed Jan 7 10:26:30 CET 2009 - schwab@suse.de
429
430
- Update to xz-4.999.7beta.
431
See git://ctrl.tukaani.org/lzma-utils.git.
432
- Rename to xz.
433
434
-------------------------------------------------------------------
435
Wed Jul 30 13:53:18 CEST 2008 - schwab@suse.de
436
437
- Update to lzma-4.32.7.
438
* If "lzma -t" is run on a corrupt file or interrupted by a signal,
439
don't unlink /dev/null.
440
441
* Partial fix to race conditions where a signal could make lzma to
442
unlink both the source and destination files. Now it cannot lose
443
data anymore, but with bad luck an incomplete file may be left
444
on the disk.
445
446
-------------------------------------------------------------------
447
Wed May 14 22:04:25 CEST 2008 - schwab@suse.de
448
449
- Update to lzma-4.32.6.
450
* Always use 32-bit integer to hold probability variables. Earlier,
451
these were 64-bit on 64-bit architectures, which hurt cache
452
efficiency in the CPU, and thus performance of LZMA. 32-bit
453
architectures are not affected by this change.
454
* Fix a theoretical data corruption bug in the LZMA encoder. It is
455
about overflowing a 32-bit integer, whose typical value stays below
456
five. I don't know if it is actually possible to construct to a file
457
that could make it overflow. Even if it were possible, it would "only"
458
make the output file corrupt so that it is 4 GiB too small; there
459
are no other security risks. Now the integer is 64-bit to be sure
460
it won't overflow.
461
* Add support for copying timestamps on operating systems that support
462
setting timestamps only by filename, not by file descriptor.
463
* Several portability fixes were made.
464
465
-------------------------------------------------------------------
466
Fri May 9 11:51:42 CEST 2008 - schwab@suse.de
467
468
- Revert last changes.
469
470
-------------------------------------------------------------------
471
Tue May 6 22:36:09 CEST 2008 - bk@suse.de
472
473
- ci removed #neededforbuild while mbuild converts to BuildRequires
474
- bzip2 source to save space (not lzma, so it can be built in <11.0)
475
476
-------------------------------------------------------------------
477
Tue May 6 14:24:02 CEST 2008 - bk@suse.de
478
479
- run the package-provided self-test by adding a call to 'make check'
480
- use %configure instead of equivalent configure call with options
481
- improved to allow building in SLES and non-SUSE repositories, eg:
482
- replace obsolete nostatic patch with check for static objects
483
- use more generic wildcards in the file list for manual pages
484
485
-------------------------------------------------------------------
486
Mon Feb 4 19:20:31 CET 2008 - schwab@suse.de
487
488
- Fix installation.
489
490
-------------------------------------------------------------------
491
Mon Feb 4 13:32:06 CET 2008 - schwab@suse.de
492
493
- Update to lzma-4.32.5.
494
* The percentage shown when --verbose is used, works again. Also some
495
typos were fixed from the messages printed by --verbose.
496
* Several small portability fixes were made.
497
498
-------------------------------------------------------------------
499
Fri Jan 4 07:12:26 CET 2008 - crrodriguez@suse.de
500
501
- Version 4.32.4
502
* Ignore command line switch --format=alone. This way current scripts
503
can be written so that they will produce LZMA_Alone format files
504
even with the new command line tool once it is finishes along with
505
liblzma.
506
* The command line tool now tells if the user tries to decode files
507
in the new .lzma format. The message recommends upgrading to newer
508
LZMA Utils.
509
* Added some internal consistency checks to liblzmadec, so that it
510
doesn't crash if given lzmadec_stream whose initialization failed.
511
Some applications using zlib and libbzip2 don't check if
512
initialization was successful, and expect that error gets caught
513
safely later.
514
- disable static libraries
515
- remove liblzmadec.la that has empty dependency_libs
516
- do not link utils statically
517
518
-------------------------------------------------------------------
519
Mon Dec 3 14:12:12 CET 2007 - dmueller@suse.de
520
521
- update to 4.32.3:
522
* rare file content loss bugs fixed (did not check for error upon close())
523
* permissions copying fixed
524
- testsuited switched partially to GPLv3
525
- fix library package name
526
527
-------------------------------------------------------------------
528
Thu Oct 11 14:52:41 CEST 2007 - schwab@suse.de
529
530
- Fix missing include.
531
532
-------------------------------------------------------------------
533
Wed Oct 10 14:56:31 CEST 2007 - schwab@suse.de
534
535
- Initial version 4.32.0beta5.
536
537