Changelog for gzip-debuginfo-1.3.12-69.3.i586.rpm :
Thu Jan 14 13:00:00 2010 msebenAATTnovell.com
- added gzip-CVE-2009-2624.diff and gzip-CVE-2010-0001.diff : fix
possible denial of service and arbitrary code execution

Wed Jan 7 13:00:00 2009 schwabAATTsuse.de
- Fixup rsyncable patch.

Thu May 8 14:00:00 2008 schwabAATTsuse.de
- Fix zdiff with two compressed files.

Sun May 20 14:00:00 2007 schwabAATTsuse.de
- Fix compiling with glibc 2.6.

Sat Apr 14 14:00:00 2007 schwabAATTsuse.de
- Update to gzip 1.3.12.

* znew now uses $TMPDIR (default /tmp) instead of always using /tmp.

Tue Mar 27 14:00:00 2007 dmuellerAATTsuse.de
- reenable profile feedback
- remove hardcoded -mcpu=pentiumpro for x86

Tue Feb 6 13:00:00 2007 schwabAATTsuse.de
- Update to gzip 1.3.11.

* As per the GNU coding standards, the behavior of gzip and its
companion executables no longer depend on the name used to invoke them.
For example, \'gzip\' and \'gunzip\' are no longer hard links;
instead, \'gunzip\' is now a small program that invokes \'gzip -d\'.

* zdiff now checks for subsidiary gzip failures, and works around
bugs in IRIX 6 sh, Tru64 4.0F ksh, and Solaris 8 bash.

Mon Jan 8 13:00:00 2007 schwabAATTsuse.de
- Update to gzip 1.3.10.

* gzip -c and zcat now work on special files, files with special mode bits,
and files with multiple hard links.

* gzip -q now exits with status 2 (not 1) when SIGPIPE is received.

* zcmp and zdiff did not work in the usual case, due to a typo.

* zgrep has many bugs fixed with argument handling, special characters,
and exit status.

* zless no longer mishandles $%=~ in file names.

Fri Dec 15 13:00:00 2006 schwabAATTsuse.de
- Update to gzip 1.3.9.

* No major changes; only porting fixes.

Tue Dec 12 13:00:00 2006 schwabAATTsuse.de
- Update to gzip 1.3.8.

* Fix some gzip problems:
- A security fix from Debian 1.3.5-5 was inadvertently omitted.
- The assembler is now invoked with --noexecstack if supported,
so that gzip can better resist stack-smashing attacks.

Thu Dec 7 13:00:00 2006 schwabAATTsuse.de
- Update to gzip 1.3.7.

* Fix some gzip problems:
- Refuse to compress setuid or setgid files, or files with the sticky bit.
- Fix more race conditions in setting file permissions and owner,
removing output files, following symbolic links, and dealing with
special files.
- Remove most of the code working around ENAMETOOLONG deficiencies.
Systems with those deficiencies are long-dead, and the workarounds
had race conditions on modern hosts.
- Catch CPU time and file size limit signals, too.
- Check for read errors when closing files.
- Fix a core dump caused by a stray abort mistakenly introduced in 1.3.6.

* Fix some gzexe problems:
- Improve resistance to denial-of-service attacks.
- Fix some quoting and escaping bugs.
- Do not assume /tmp is sticky (though it should be!).
- Do not assume the working directory can be written.
- Rely on PATH in the generated executable, as the man page says.
- Don\'t assume IFS is sane.
- Exit with signal\'s status, if signaled.

Mon Dec 4 13:00:00 2006 schwabAATTsuse.de
- Update to gzip 1.3.6.

* Fix some race conditions in setting file time stamps, permissions, and owner.

* Fix some race conditions in signal handling.

* When gzip exits due to a signal, it exits with the signal\'s status, not 1.

* gzip now restores file time stamps to the resolution supported by the
time-setting primitives of the operating system, typically 1 microsecond.
Formerly it restored them only to the nearest second.

* gzip -r no longer attempts to reset the last-access times of directories
it reads, as this messes up when other processes are reading the directories.

* The options --version and --help now work on all gzip-installed executables,
and now use a format similar to other GNU programs.

* The manual is now distributed under the terms of the GNU Free
Documentation License without invariant sections or cover texts.

* Port to current versions of Autoconf, Automake, and Gnulib.

Wed Sep 13 14:00:00 2006 schwabAATTsuse.de
- Verify hash tables when unpacking [#202365].