Changelog for bzip2-devel-1.0.3-6tr.i586.rpm :
Mon Feb 26 13:00:00 2007 Nived Gopalan
- Rebuilt

Tue Jan 9 13:00:00 2007 Bipin S 1.0.3-5tr
- SECURITY Fix: Fixes a race condition which allows local users to
modify permissions of arbitrary files via a hard link attack on a
file while it is being decompressed, whose permissions are changed
by bzip2 after the decompression is complete.

The Common Vulnerabilities and Exposures project (cve.mitre.org)
has assigned the name CAN-2005-0953 to this issue.

Fri Aug 5 14:00:00 2005 Syed Shabir Zakiullah 1.0.3-4tr
- SECURITY Fix: Command injection vulnerability in the \"bzgrep\"
- bzgrep did not handle shell metacharacters like \'|\' and \'&\' properly
when they occurred in input file names. This could be exploited to
execute arbitrary commands with user privileges if bzgrep was run in
an untrusted directory with specially crafted file names.

The Common Vulnerabilities and Exposures project (cve.mitre.org)
has assigned the name CAN-2005-0758 to this issue.

Mon May 9 14:00:00 2005 Chr. Toldnes 1.0.3-2tr
- ldconfig post scripts belongs to bzip2-libs

Thu May 5 14:00:00 2005 Hasher J 1.0.3-1tr
- New upstream

Wed Mar 16 13:00:00 2005 Bipin S 1.0.2-13tr
- Rebuilt

Wed Dec 3 13:00:00 2003 Erlend Midttun 1.0.2-10tr
- Big rebuild

Wed Jun 18 14:00:00 2003 Erlend Midttun 1.0.2-9tr
- Big rebuild

Tue May 20 14:00:00 2003 Tore Olsen 1.0.2-8to
- Install dynamically linked bzip2.
- Link binaries instead of having multiple copies.
- Added libbz2.so to devel package.

Mon Mar 24 13:00:00 2003 Erlend Midttun 1.0.2-7em
- Rebuilt against glibc-2.3.2.

Thu Jun 27 14:00:00 2002 Nico Erfurth 1.0.2-6ne
- Moved libbz2.a to bzip2-devel

Thu Jun 27 14:00:00 2002 Nico Erfurth 1.0.2-5ne
- Implemented usage of macros for LFS
- splitted the package into runtime/libs/devel
- removed the useless install-call for libbz2.a it\'s installed
by make install

Wed Jun 26 14:00:00 2002 Roland Kruse 1.0.2-4rk
- Install libbz2.a
- Add symlink libbz2.so.1 -> libbz2.so.1.0.2

Thu Jun 20 14:00:00 2002 Nico Erfurth 1.0.2-3ne
- Fixed Source0 must be v102 instead of v100
- Added LargeFile-support if glibc2.2 or higher is used

Wed Jun 5 14:00:00 2002 Christian H. Toldnes
- Forceinstall libbz2.so.1.0.2, due to sucky Makefiles.

Mon Jun 3 14:00:00 2002 Christian H. Toldnes
- Upgrade to 1.0.2

Wed Nov 1 13:00:00 2000 Erlend Midttun
- Seems like we lost shared libraries along the way.

Tue Sep 12 14:00:00 2000 Erlend Midttun
- Upgrade to 1.0.1

Fri Jan 21 13:00:00 2000 Tore Olsen
- upgrade to 0.9.5d
- remade shlib patch and moved man pages to /usr/share (FHS compliance)

Tue Aug 10 14:00:00 1999 Jeff Johnson
- upgrade to 0.9.5c.

Mon Aug 9 14:00:00 1999 Bill Nottingham
- install actual bzip2 binary, not libtool cruft.

Sun Aug 8 14:00:00 1999 Jeff Johnson
- run ldconfig to get shared library.

Mon Aug 2 14:00:00 1999 Jeff Johnson
- create shared libbz1.so.
* library.

Sun Apr 4 14:00:00 1999 Jeff Johnson
- update to bzip2-0.9.0c.

Sun Mar 21 13:00:00 1999 Cristian Gafton
- auto rebuild in the new build environment (release 4)

Thu Dec 17 13:00:00 1998 Cristian Gafton
- build against glibc 2.1

Wed Sep 30 14:00:00 1998 Cristian Gafton
- force compilation with egcs to avoid gcc optimization bug (thank God
we haven\'t been beaten by it)

Wed Sep 9 14:00:00 1998 Cristian Gafton
- version 0.9.0b

Tue Sep 8 14:00:00 1998 Cristian Gafton
- updated to 0.9.0

Thu Apr 9 14:00:00 1998 Cristian Gafton
- first build for Manhattan