~ubuntu-branches/ubuntu/trusty/unzip/trusty-security : changes

~ubuntu-branches/ubuntu/trusty/unzip/trusty-security » Changes from revision 28

From Revision 28 to 9

Rev	Summary	Authors	Tags	Date
28	* SECURITY UPDATE: heap overflow in charset_to_intern() * SECURITY UPDATE: heap overflow in charset_to_intern() - debian/patches/06-unzip60-alt-iconv-utf8: updated to fix buffer overflow in unix/unix.c. - CVE-2015-1315 * SECURITY REGRESSION: regression with executable jar files - debian/patches/09-cve-2014-8139-crc-overflow: updated to fix regression. * SECURITY REGRESSION: regression with certain compressed data headers - debian/patches/12-cve-2014-9636-test-compr-eb: updated to fix regression.	Marc Deslauriers	6.0-9ubuntu1.3	9 years ago
27	* SECURITY UPDATE: heap overflow via mismatched block sizes * SECURITY UPDATE: heap overflow via mismatched block sizes - debian/patches/12-cve-2014-9636-test-compr-eb: ensure compressed and uncompressed block sizes match when using STORED method in extract.c. - CVE-2014-9636	Marc Deslauriers	6.0-9ubuntu1.2	9 years ago
26	* SECURITY UPDATE: CRC32 verification heap-based overflow * SECURITY UPDATE: CRC32 verification heap-based overflow - debian/patches/09-cve-2014-8139-crc-overflow: check extra block length in extract.c. - CVE-2014-8139 * SECURITY UPDATE: out-of-bounds write issue in test_compr_eb() - debian/patches/10-cve-2014-8140-test-compr-eb: properly validate sizes in extract.c. - CVE-2014-8140 * SECURITY UPDATE: out-of-bounds read issues in getZip64Data() - debian/patches/11-cve-2014-8141-getzip64data: validate extra fields in fileio.c, check sizes in process.c. - CVE-2014-8141	Marc Deslauriers	6.0-9ubuntu1.1	9 years ago
25	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Add patch from archlinux which adds the -O option, allowing a charset to be specified for the proper unzipping of non-Latin and non-Unicode filenames.	Colin Watson	6.0-9ubuntu1	10 years ago
24	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Add patch from archlinux which adds the -O option, allowing a charset to be specified for the proper unzipping of non-Latin and non-Unicode filenames. - Use correct strip program when cross-building.	Colin Watson	6.0-8ubuntu1	11 years ago
23	Use correct strip program when cross-building. Use correct strip program when cross-building.	Colin Watson	6.0-7ubuntu2	11 years ago
22	* Merge from Debian unstable. Remaining change: * Merge from Debian unstable. Remaining change: - Added patch from archlinux which adds the -O option allowing a charset to be specified for the proper unzipping of non-latin and non-unicode filenames. * Merge adds Multi-Arch: foreign. (LP: #1010450)	Logan Rosen	6.0-7ubuntu1	11 years ago
21	Added patch from archlinux which adds the -O option allowing... Added patch from archlinux which adds the -O option allowing a charset to be specified for the proper unzipping of non-latin and non-unicode filenames. (LP: #580961)	Brian Thomason	6.0-4ubuntu1	13 years ago
20	* Added homepage field to control file. * Added homepage field to control file. * Switch to 3.0 (quilt) source format. * Support cross-build.	Santiago Vila	6.0-4	14 years ago
19	rebuild rest of main for armel armv7/thumb2 optimization; rebuild rest of main for armel armv7/thumb2 optimization; UbuntuSpec:mobile-lucid-arm-gcc-v7-thumb2	Alexander Sack	6.0-1build1	14 years ago
18	* New upstream release. Closes: #496989. * New upstream release. Closes: #496989. * Enabled new Unicode support. Closes: #197427. This may or may not work for your already created zipfiles, but it's not a bug unless they were created using the Unicode feature present in zip 3.0. * Built using DATE_FORMAT=DF_YMD so that unzip -l show dates in ISO format, as that's the only available one which makes sense. Closes: #312886. * Enabled new bzip2 support. Closes: #426798. * Exit code for zipgrep should now be the right one. Closes: #441997. * The reason why a file may not be created is now shown. Closes: #478791. * Summary of changes in this version not being the debian/* files: - Manpages in section 1, not 1L. - Branding patch. UnZip by Debian. Original by Info-ZIP. - Always #include <unistd.h>. Debian GNU/kFreeBSD needs it.	Santiago Vila	6.0-1	14 years ago
17	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - debian/rules: Configure with large file support. - unzip.c: Change banner to indicate Ubuntu modification. - support UTF-8 file names.	Michael Vogt	5.52-12ubuntu1	15 years ago
16	* Merge with Debian; remaining changes: * Merge with Debian; remaining changes: - debian/rules: Configure with large file support. - unzip.c: Change banner to indicate Ubuntu modification. - support UTF-8 file names.	Matthias Klose	5.52-11ubuntu1	15 years ago
15	* SECURITY UPDATE: arbitrary code execution via heap corrupt... * SECURITY UPDATE: arbitrary code execution via heap corruption. * inflate.c: fix invalid free() calls, patch from Tavis Ormandy. * References CVE-2008-0888	Kees Cook	5.52-10ubuntu2	16 years ago
14	* Merge with Debian; remaining changes: * Merge with Debian; remaining changes: - debian/rules: Configure with large file support. - unzip.c: Change banner to indicate Ubuntu modification. - support UTF-8 file names.	Matthias Klose	5.52-10ubuntu1	16 years ago
13	Apply patch from https://bugzilla.altlinux.org/long_list.cgi... Apply patch from https://bugzilla.altlinux.org/long_list.cgi?buglist=4871 to support UTF-8 file names. Ubuntu #10979.	Matthias Klose	5.52-9ubuntu3	17 years ago
12	* Rebuild for changes in the amd64 toolchain. * Rebuild for changes in the amd64 toolchain. * Set Ubuntu maintainer address.	Matthias Klose	5.52-9ubuntu2	17 years ago
11	Merge from debian unstable. Merge from debian unstable.	Michael Vogt	5.52-9ubuntu1	17 years ago
10	* Merge from debian unstable; only Ubuntu changes left: * Merge from debian unstable; only Ubuntu changes left: - debian/rules: Configure with large file support. - unzip.c: Change banner to indicate Ubuntu modification.	Martin Pitt	5.52-8ubuntu1	17 years ago
9	* const.h, process.c: Limit the maximum length of displayed ... * const.h, process.c: Limit the maximum length of displayed file names to 512 bytes, to avoid spewage with excessively long file names (which caused buffer overflows until the recent security fix for CVE-2005-4667). * Thanks to Santiago Vila for pointing this out.	Martin Pitt	5.52-6ubuntu4	18 years ago

Older »