Change log for zziplib package in Debian

zziplib (0.13.72+dfsg.1-1.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1063243

 -- Benjamin Drung <email address hidden>  Fri, 01 Mar 2024 13:01:03 +0000

Available diffs

• diff from 0.13.72+dfsg.1-1.1 to 0.13.72+dfsg.1-1.2 (2.1 KiB)

zziplib (0.13.72+dfsg.1-1.2~exp1) experimental; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.

 -- Steve Langasek <email address hidden>  Mon, 05 Feb 2024 20:17:00 +0000

zziplib (0.13.62-3.2+deb10u1) buster; urgency=high

  * Non-maintainer upload by the LTS Team.
  * CVE-2020-18442
    Because of mishandling a return value, an attacker might cause a
    denial of service due to an infinite loop.

 -- Thorsten Alteholz <email address hidden>  Sun, 26 Dec 2021 00:03:02 +0100

zziplib (0.13.62-3.3+deb11u1) bullseye; urgency=high

  * Non-maintainer upload by the LTS Team.
  * CVE-2020-18442
    Because of mishandling a return value, an attacker might cause a
    denial of service due to an infinite loop.

 -- Thorsten Alteholz <email address hidden>  Sun, 26 Dec 2021 00:03:02 +0100

zziplib (0.13.72+dfsg.1-1.1) unstable; urgency=medium

  * Non-Maintainer Upload.
  * Fix (i386) cross-compilation.

 -- Lukas Märdian <email address hidden>  Mon, 21 Jun 2021 14:42:07 +0200

Available diffs

• diff from 0.13.62-3.3 to 0.13.72+dfsg.1-1.1 (634.6 KiB)

zziplib (0.13.62-3.3) unstable; urgency=medium

  * Non-maintainer upload.
  * Build using python2. Closes: #856566, #967237.
  * Update home page. Closes: #863892.
  * Update watch file.

 -- Matthias Klose <email address hidden>  Thu, 04 Mar 2021 09:54:37 +0100

Available diffs

• diff from 0.13.62-3.2ubuntu1 (in Ubuntu) to 0.13.62-3.3 (827 bytes)

zziplib (0.13.62-3.2~deb9u1) stretch; urgency=medium

  * Rebuild for stretch.

 -- Salvatore Bonaccorso <email address hidden>  Sun, 31 Mar 2019 22:02:00 +0200

zziplib (0.13.62-3.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Invalid memory access in zzip_disk_fread (CVE-2018-6381) (Closes: #889096)
  * Reject the ZIP file and report it as corrupt if the size of the central
    directory and/or the offset of start of central directory point beyond the
    end of the ZIP file (CVE-2018-6484, CVE-2018-6541, CVE-2018-6869)
    (Closes: #889089)
  * bus error in zzip_disk_findfirst function in zzip/mmapped.c
    (CVE-2018-6540) (Closes: #923659)
  * out of bound read in mmapped.c:zzip_disk_fread() causes crash
    (CVE-2018-7725) (Closes: #913165)
  * Bus error in zip.c:__zzip_parse_root_directory() cause crash via crafted
    zip file (CVE-2018-7726) (Closes: #913165)
  * Memory leak triggered in the function __zzip_parse_root_directory in zip.c
    (CVE-2018-16548) (Closes: #910335)

 -- Salvatore Bonaccorso <email address hidden>  Mon, 04 Mar 2019 22:43:14 +0100

Available diffs

• diff from 0.13.62-3.1ubuntu1 (in Ubuntu) to 0.13.62-3.2 (6.3 KiB)

zziplib (0.13.62-3+deb8u1) jessie-security; urgency=medium

  * CVE-2017-5981 CVE-2017-5980 CVE-2017-5979 CVE-2017-5978 CVE-2017-5976
    CVE-2017-5975 CVE-2017-5974

 -- Moritz Muehlenhoff <email address hidden>  Fri, 09 Jun 2017 21:07:55 +0200

zziplib (0.13.62-3.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix multiple security issues (Closes: #854727). Thanks to Josef
    Moellers of SuSE for the patches!

 -- Moritz Muehlenhoff <email address hidden>  Sun, 04 Jun 2017 09:03:20 +0200

Available diffs

• diff from 0.13.62-3 to 0.13.62-3.1 (2.8 KiB)

zziplib (0.13.62-3) unstable; urgency=medium


  * debian/rules: Lintian error cleaning pkg-config-bad-directive

 -- Scott Howard <email address hidden>  Sun, 24 Aug 2014 22:20:40 -0400

Available diffs

• diff from 0.13.62-2 to 0.13.62-3 (546 bytes)

zziplib (0.13.62-2) unstable; urgency=low


  * Merge in Ubuntu changes to use dh-autoreconf to ensure package
    remains buildable across future ports. Thanks to Steve Langasek.
    (Closes: #736810)

 -- Scott Howard <email address hidden>  Sun, 26 Jan 2014 18:54:39 -0500

Available diffs

• diff from 0.13.56-2ubuntu1 (in Ubuntu) to 0.13.62-2 (134.4 KiB)

zziplib (0.13.62-1) unstable; urgency=low


  * New upstream release (Closes: #709437)
  * Updated symbols file.
  * export-dynamic.patch dropped, accepted upstream

 -- Scott Howard <email address hidden>  Mon, 20 Jan 2014 17:12:51 -0500

zziplib (0.13.56-2) unstable; urgency=low


  * Adopting package (Closes: #733144)
  * use source/format 3.0 (quilt), and separate debian changes into
    patch "export-dynamic.patch"
  * simple dh rules
    - multiarch enabled
    - use --with autotools-dev (Closes: #717837)
  * build depend on zip so build checks run
  * added symbols file
  * No longer conflict with zziplib-0-12 (no reason to conflict)
    (Closes: #565982)
  * Removed unneeded -lz from .pc file (Closes: #471065)
    - debian/patches/remove_extra_z_linking.patch

 -- Scott Howard <email address hidden>  Tue, 07 Jan 2014 13:57:57 -0500

zziplib (0.13.56-1.1) unstable; urgency=low


  * Non-maintainer upload.
  * Fix "FTBFS: x86_64-linux-gnu-gcc: error: unrecognized option 
    '--export-dynamic'": apply patch from Ubuntu / Matthias Klose: 
    - Pass correct linker option. LP: #832895. Closes: #625064.
  * Fix "Emptying dependency_libs in .la files": use recipe provided by Neil
    Williams in the bug report. Closes: #633335

 -- gregor herrmann <email address hidden>  Thu, 06 Oct 2011 20:07:37 +0200

zziplib (0.13.56-1) unstable; urgency=low


  * New Upstream Version
    - update debian/man3.patch
    - remove msvc8/zip.exe and msvc7/pkzip.exe
  * Upgrade the standard version to 3.8.2
  * Add the vcs information to debian/control

 -- LIU Qi <email address hidden>  Sun, 12 Jul 2009 14:37:46 +0800

zziplib (0.13.54-1) unstable; urgency=low


  * New Maintainer. Closes: #529561
  * New Upstream Version. Closes: #530850
  * Fixed the lintian warnings of manpages.
  * 01-fetch.patch: dropped as it was merged upstream

 -- LIU Qi <email address hidden>  Sun, 31 May 2009 00:08:56 +0800

zziplib (0.13.50-1) unstable; urgency=low


  * New upstream version 
    - Update 01-fetch.patch
  * debhelper compat version is 7
  * Standards version is 3.8.1
  * Run dh_prep instead of dh_clean -k
  * Add debian/watch

 -- Anibal Monsalve Salazar <email address hidden>  Mon, 23 Mar 2009 21:13:57 +1100

zziplib (0.13.49-4) unstable; urgency=low


  * NMU acknowledgement. Closes: #443880 
  * Fixed the following lintian issues:
    - zziplib source: out-of-date-standards-version 3.7.2 (current is 3.7.3)
    - zziplib: description-contains-homepage

 -- Anibal Monsalve Salazar <email address hidden>  Sun, 06 Apr 2008 08:13:02 +1000