Changelog for liblzo2-2-2.08-3.5.1.x86_64.rpm :
Thu Jul 24 14:00:00 2014 dsterbaAATTsuse.cz
- enable lzo-devel-static package build

Wed Jul 2 14:00:00 2014 mrueckertAATTsuse.de
- update to 2.08 (bnc#883947) CVE-2014-4607
- Updated the Autoconf scripts to fix some reported build
problems.
- Added CMake build support.
- Fixed lzo_init() on big-endian architectures like Sparc.
- additional changes in 2.07

* Fixed a potential integer overflow condition in the \"safe\"
decompressor variants which could result in a possible buffer
overrun when processing maliciously crafted compressed input
data.
Fortunately this issue only affects 32-bit systems and also can
only happen if you use uncommonly huge buffer sizes where you
have to decompress more than 16 MiB (> 2^24 bytes) untrusted
compressed bytes within a single function call, so the
practical implications are limited.
POTENTIAL SECURITY ISSUE. CVE-2014-4607.

* Removed support for ancient configurations like 16-bit \"huge\"
pointers - LZO now requires a flat 32-bit or 64-bit memory
model.

* Assorted cleanups.

Tue Apr 16 14:00:00 2013 mmeisterAATTsuse.com
- Added url as source.
Please see http://en.opensuse.org/SourceUrls

Mon Aug 27 14:00:00 2012 cfarrellAATTsuse.com
- license update: GPL-2.0+
No GPL-2.0 \"only\" licenses found in the package

Sat Feb 11 13:00:00 2012 crrodriguezAATTopensuse.org
- move libraries back to %{_libdir}, /usr merge project

Sun Sep 25 14:00:00 2011 crrodriguezAATTopensuse.org
- Update to version 2.06

* Some minor optimizations for big-endian architectures.

* Fixed overly strict malloc() misalignment check in examples.

Fri May 6 14:00:00 2011 crrodriguezAATTopensuse.org
- Update to version 2.05

* Converted the configure system to non-recursive Automake.

* Applied some overdue speed optimizations for modern x86/x64 architectures
and current compilers like gcc 4.6 and MSVC 2010.

Wed Dec 22 13:00:00 2010 ajAATTsuse.de
- Fix specfile (remove deleted lzo-2.03-alias.patch).

Fri Nov 12 13:00:00 2010 mrueckertAATTsuse.de
- update to 2.0.4

* Fixed a gcc-4.5 aliasing issue in lzo_init().

* Updated the configure system.

* Assorted cleanups.
- dropped lzo-2.03-alias.patch:
solved differently upstream
- dropped debug_package_requires define

Sat Oct 30 14:00:00 2010 cristian.rodriguezAATTopensuse.org
- Use GCC visibility.

Thu Feb 11 13:00:00 2010 rguentherAATTsuse.de
- fix aliasing problems

Sat Dec 19 13:00:00 2009 jengelhAATTmedozas.de
- add baselibs.conf as a source
- enable parallel build