Changelog for gzip-1.13-1.50.x86_64.rpm :

* Tue Oct 24 2023 sarah.krieschAATTopensuse.org- Fix s390x build with \'gcc -Dalignas=_Alignas\' bug#66709
* Wed Aug 30 2023 danilo.spinellaAATTsuse.com- Update to 1.13:
* zless now diagnoses gzip failures, if using less 623 or later.
* When SIGPIPE is ignored, gzip now exits with status 2 (warning) instead of status 1 (error) when writing to a broken pipe. This is more useful with programs like \'less\' that treat gzip exit status 2 as a non-failure.
* \'gzip -d\' no longer fails to report invalid compressed data that uses a dictionary distance outside the input window. [bug present since the beginning]
* Port to C23, which does not allow K&R-style function definitions with parameters, and which does not define __alignas_is_defined.- Refreshed manpage-no-date.patch
* Wed Aug 16 2023 dimstarAATTopensuse.org- export CONFIG_SHELL=/bin/sh before running configure: results in the shell script (zcat/zgrep/…) to receive a /bin/sh shebang instead of requiring bash (the local shell used to build).- Use for i in $(seq 1 9) instead of bashism for in in {1..9}, and drop buildshell definition to require bash.
* Tue Dec 27 2022 lnusselAATTsuse.com- Replace transitional %usrmerged macro with regular version check (boo#1206798)
* Wed Apr 27 2022 dimstarAATTopensuse.org- Rename xz_lzma.patch xz_lzma_zstd.patch and expand the patch to supprt zstd compression (boo#1198922).
* Sat Apr 09 2022 dmuellerAATTsuse.com- update to 1.12 (CVE-2022-1271,bsc#1198062):
* \'gzip -l\' no longer misreports file lengths 4 GiB and larger. Previously, \'gzip -l\' output the 32-bit value stored in the gzip header even though that is the uncompressed length modulo 2
*
*32. Now, \'gzip -l\' calculates the uncompressed length by decompressing the data and counting the resulting bytes. Although this can take much more time, nowadays the correctness pros seem to outweigh the performance cons.
* \'zless\' is no longer installed on platforms lacking \'less\'.
* zgrep applied to a crafted file name with two or more newlines can no longer overwrite an arbitrary, attacker-selected file. [bug introduced in gzip-1.3.10]
* zgrep now names input file on error instead of mislabeling it as \"(standard input)\", if grep supports the GNU -H and --label options.
* \'zdiff -C 5\' no longer misbehaves by treating \'5\' as a file name.
* Configure-time options like --program-prefix now work.- refresh zdiff.diff, zgrep.diff, zmore.diff
* Sun Jan 30 2022 dmuellerAATTsuse.com- add conflicts/provides for alternative(gzip)- modernize spec file
* Thu Sep 09 2021 danilo.spinellaAATTsuse.com- Update to 1.11:
* Performance improvements
* Added hardware acceleration for IBM Z- Refresh patches:
* manpage-no-date.patch
* xz_lzma.patch- Remove upstreamed patches:
* gzip-1.10-fix-DFLTCC-segfault.patch
* gzip-1.10-fix_count_of_lines_to_skip.patch
* gzip-1.10-ibm_dfltcc_support.patch
* Wed Jun 23 2021 fbuiAATTsuse.com- Avoid text relocation on i386 (bsc#1143125) Text relocation doesn\'t cope well with some security hardening which consists in prohibiting attempts to change memory mappings to become executable. Hence disable the use of assembler code and get rid of text relocations especially since the assembler code is slower than the code generated by gcc according to Fedora. According to Debian this also fixes gzip generating different results on ia64.
* Tue Apr 13 2021 pgajdosAATTsuse.com- fix DFLTCC segfault [bsc#1177047]- added patches fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc + gzip-1.10-fix-DFLTCC-segfault.patch
* Thu Mar 04 2021 kstreitovaAATTsuse.com- gzip.spec: move %patch10 from the ifarch condition (mistake)
* Wed Jan 27 2021 kstreitovaAATTsuse.com- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count of lines to skip [bsc#1180713]
* Fri Oct 16 2020 lnusselAATTsuse.de- prepare usrmerge (boo#1029961)
* Wed Sep 02 2020 kstreitovaAATTsuse.com- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS. [jsc#SLE-13775]
* Tue Aug 27 2019 kstreitovaAATTsuse.com- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]
* Thu Jun 06 2019 kstreitovaAATTsuse.com- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
* it adds support for DFLTCC (hardware-accelerated deflation) for s390x arch
* enable it via \"--enable-dfltcc\" option
* Sun Dec 30 2018 astiegerAATTsuse.com- gzip 1.10:
* Compressed gzip output no longer contains the current time as a timestamp when the input is not a regular file. Instead, the output contains a null (zero) timestamp. This makes gzip\'s behavior more reproducible when used as part of a pipeline.
* A use of uninitialized memory on some malformed inputs has been fixed.
* A few theoretical race conditions in signal handers have been fixed.- drop upstreamed patches:
* gnulib-libio.patch
* gzip-1.8-deprecate_netstat.patch
* Wed Aug 01 2018 schwabAATTsuse.de- gnulib-libio.patch: Update gnulib for libio.h removal
* Thu Feb 22 2018 fvogtAATTsuse.com- Use %license (boo#1082318)
* Fri Jan 12 2018 meissnerAATTsuse.com- license is GPL-3.0+
* Thu Jan 11 2018 kbabiochAATTsuse.com- Update to 1.9
* Fix suffix handling
* Fix bug when handling pack format while decompressing
* Fix time handling bug
* Improve exit code handling for shell scripts- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included upstream now- refresh manpage-no-date.patch- spec file cleanups
* Tue Jan 02 2018 kstreitovaAATTsuse.com- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated \'netstat -n\' command in tests/init.sh script
* Fri Dec 01 2017 kstreitovaAATTsuse.com- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of leading zeros in the end-of-block code [bsc#1067891]
* Wed May 31 2017 bwiedemannAATTsuse.com- Make build reproducible in spite of gcc profile based optimizations (boo#1040589)
* Tue May 30 2017 srcAATTposteo.de- changing the way how gcc profiling is generating to have a reproducible build
* Tue Apr 11 2017 kstreitovaAATTsuse.com- define %{_buildshell} to /bin/bash as we newly rely on bash features like {1..9}
* Thu Mar 23 2017 kstreitovaAATTsuse.com- cleanup with spec-cleaner- use loop with a range instead of a number list
* Wed Apr 27 2016 mpluskalAATTsuse.com- Update to 1.8
* gzip -l no longer falsely reports a write error when writing to a pipe.
* Port to Oracle Solaris Studio 12 on x86-64.
* When configuring gzip, ./configure DEFS=\'...-DNO_ASM...\' now suppresses assembler again.- Small spec file cleanup
* Tue Mar 29 2016 tchvatalAATTsuse.com- Version update to release 1.7:
* gzip now accepts the --synchronous option
* gzip now accepts the --rsyncable option
* The GZIP environment variable is now obsolescent
* Installed programs like \'zgrep\' now use the PATH environment variable as usual to find subsidiary programs like \'gzip\' and \'grep\'- Remove obsolete patch tempfile.diff- Remove upstreamed patch gzip-rsyncable.diff- Rebase manpage-no-date.patch to apply to 1.7 version
* Tue Mar 29 2016 tchvatalAATTsuse.com- Rename reproducible.patch to something actually explanatory:
* manpage-no-date.patch
* Sun Mar 20 2016 bwiedemannAATTsuse.com- Add reproducible.patch to fix build-compare
* Fri Dec 19 2014 meissnerAATTsuse.com- build with PIE
* Mon May 12 2014 vdziewieckiAATTsuse.com- Remove unneeded update-alternatives requirement (bnc#876129)- Clean spec
* Thu Sep 26 2013 schwabAATTsuse.de- Don\'t install twice
* Tue Jul 30 2013 sweet_f_aAATTgmx.de- add the correct project URL
* Tue Jul 09 2013 schwabAATTsuse.de- Override broken configure checks
* Mon Jun 10 2013 jengelhAATTinai.de- Update to new upstream release 1.6
* The \"--keep\" (-k) option was added to not delete input files, similar to other tools such as xz, lzip, and bzip2.
* A decompression issue with certain invalid data in the \"pack\" format was fixed.
* An incorrect overwrite when compiled with optimization was fixed.
* zgrep\'s handling of multi-digit context options was fixed.
* zmore now acts more like \"more\".- More robust make install call- Provide files for signature verification (we do not actually do it because gzip is part of the bootstrap cycle; but if you have gpg-offline listed as Support or in ~/.oscrc, it will be done)
* Thu Mar 28 2013 mmeisterAATTsuse.com- Added url as source. Please see http://en.opensuse.org/SourceUrls
* Tue Jan 29 2013 vdziewieckiAATTsuse.com- Add support for xz and lzma (bnc#799561 - zgrep silently fails on LZMA compressed files) - xz_lzma.patch
* Tue Oct 16 2012 vcizekAATTsuse.com- update to 1.5 - gzip -cdf mishandles some concatenated input streams: test it - gzip -cdf now handles concatenation of gzip\'d and uncompressed data - gzip: fix a data-loss bug when decompressing with --suffix=\'\' - gzip: fix nondeterministic compression results - fix \"znew -K\" to work without use of compress utility - Decode FHCRC flag properly, as per Internet RFC 1952. - zgrep: fix parsing of -Eh options - zgrep: terminate gracefully when a pipeline is interrupted by a signal - zgrep: fix shell portability bug with -f; fix mishandling of \"-e -\" - zless: decompress stdin too, if less 429 or later- dropped gzip-stdio.in.patch, refreshed others
* Tue Jul 17 2012 ajAATTsuse.de- Fix build with missing gets declaration (glibc 2.16)
* Tue Feb 07 2012 rschweikertAATTsuse.com- keep binaries in /usr tree (UsrMerge project)
* Sat Nov 13 2010 cristian.rodriguezAATTopensuse.org- disable silent rules.
* Sun Sep 19 2010 vuntzAATTopensuse.org- Update to version 1.4: + gzip -d could segfault and/or clobber the stack, possibly leading to arbitrary code execution. This affects x86_64 but not 32-bit systems. This fixes CVE-2010-0001. See also rh#554418. + gzip -d would fail with a CRC error for some valid inputs. So far, the only valid input known to exhibit this failure was compressed \"from FAT filesystem (MS-DOS, OS/2, NT)\". In addition, to trigger the failure, your memcpy implementation must copy in the \"reverse\" order.- Drop gzip-CVE-2010-0001.diff: fixed upstream.- Remove AutoReqProv: it\'s default now.- Use %configure, %makeinstall, and %{_bindir}.- Update zdiff.diff: some of the patch is upstream now. It\'s unclear to me if the rest is still needed :/ So leaving it.- Rebase zgrep.diff.
* Mon Jun 28 2010 jengelhAATTmedozas.de- use %_smp_mflags
* Tue Jan 19 2010 msebenAATTnovell.com- updated to 1.3.13 - gzip interprets an argument of \"-\" as indicating stdin, but when \"-\" is not the first name on the command line, it doesn\'t work. - remove useless if-before-free tests - remove useless casts to avoid \"make syntax-check\" failures - avoid spurious warnings from clang - avoid a leak on a error path - don\'t misinterpret a failing test as successful - avoid creating an undersized buffer for the hufts table A malformed input file can cause gzip to crash with a segmentation violation or hang in an endless loop. - avoid silent data loss e.g., on NFS, due to unchecked close of stdout - build require automake-1.11 and produce xz-compressed tarballs, too- deprecated futimens.diff and CVE-2009-2624.diff
* Thu Jan 14 2010 msebenAATTnovell.com- added gzip-CVE-2009-2624.diff and gzip-CVE-2010-0001.diff : fix possible denial of service and arbitrary code execution
* Sun Dec 06 2009 jengelhAATTmedozas.de- enabled parallel make
* Tue Mar 10 2009 sfAATTsuse.de- added doc files (README, TODO, ...) (bnc #414305)
* Wed Jan 07 2009 schwabAATTsuse.de- Fixup rsyncable patch.
* Thu May 08 2008 schwabAATTsuse.de- Fix zdiff with two compressed files.
* Sun May 20 2007 schwabAATTsuse.de- Fix compiling with glibc 2.6.
* Sat Apr 14 2007 schwabAATTsuse.de- Update to gzip 1.3.12.
* znew now uses $TMPDIR (default /tmp) instead of always using /tmp.
* Tue Mar 27 2007 dmuellerAATTsuse.de- reenable profile feedback- remove hardcoded -mcpu=pentiumpro for x86
* Tue Feb 06 2007 schwabAATTsuse.de- Update to gzip 1.3.11.
* As per the GNU coding standards, the behavior of gzip and its companion executables no longer depend on the name used to invoke them. For example, \'gzip\' and \'gunzip\' are no longer hard links; instead, \'gunzip\' is now a small program that invokes \'gzip -d\'.
* zdiff now checks for subsidiary gzip failures, and works around bugs in IRIX 6 sh, Tru64 4.0F ksh, and Solaris 8 bash.
* Mon Jan 08 2007 schwabAATTsuse.de- Update to gzip 1.3.10.
* gzip -c and zcat now work on special files, files with special mode bits, and files with multiple hard links.
* gzip -q now exits with status 2 (not 1) when SIGPIPE is received.
* zcmp and zdiff did not work in the usual case, due to a typo.
* zgrep has many bugs fixed with argument handling, special characters, and exit status.
* zless no longer mishandles $%=~ in file names.
* Fri Dec 15 2006 schwabAATTsuse.de- Update to gzip 1.3.9.
* No major changes; only porting fixes.
* Tue Dec 12 2006 schwabAATTsuse.de- Update to gzip 1.3.8.
* Fix some gzip problems: - A security fix from Debian 1.3.5-5 was inadvertently omitted. - The assembler is now invoked with --noexecstack if supported, so that gzip can better resist stack-smashing attacks.
* Thu Dec 07 2006 schwabAATTsuse.de- Update to gzip 1.3.7.
* Fix some gzip problems: - Refuse to compress setuid or setgid files, or files with the sticky bit. - Fix more race conditions in setting file permissions and owner, removing output files, following symbolic links, and dealing with special files. - Remove most of the code working around ENAMETOOLONG deficiencies. Systems with those deficiencies are long-dead, and the workarounds had race conditions on modern hosts. - Catch CPU time and file size limit signals, too. - Check for read errors when closing files. - Fix a core dump caused by a stray abort mistakenly introduced in 1.3.6.
* Fix some gzexe problems: - Improve resistance to denial-of-service attacks. - Fix some quoting and escaping bugs. - Do not assume /tmp is sticky (though it should be!). - Do not assume the working directory can be written. - Rely on PATH in the generated executable, as the man page says. - Don\'t assume IFS is sane. - Exit with signal\'s status, if signaled.
* Mon Dec 04 2006 schwabAATTsuse.de- Update to gzip 1.3.6.
* Fix some race conditions in setting file time stamps, permissions, and owner.
* Fix some race conditions in signal handling.
* When gzip exits due to a signal, it exits with the signal\'s status, not 1.
* gzip now restores file time stamps to the resolution supported by the time-setting primitives of the operating system, typically 1 microsecond. Formerly it restored them only to the nearest second.
* gzip -r no longer attempts to reset the last-access times of directories it reads, as this messes up when other processes are reading the directories.
* The options --version and --help now work on all gzip-installed executables, and now use a format similar to other GNU programs.
* The manual is now distributed under the terms of the GNU Free Documentation License without invariant sections or cover texts.
* Port to current versions of Autoconf, Automake, and Gnulib.
* Wed Sep 13 2006 schwabAATTsuse.de- Verify hash tables when unpacking [#202365].
* Mon Mar 13 2006 schwabAATTsuse.de- Add rsyncable patch [#155442].
* Wed Jan 25 2006 mlsAATTsuse.de- converted neededforbuild to BuildRequires
* Fri Nov 11 2005 pthAATTsuse.de- Don\'t obsolete compress.
* Mon Oct 31 2005 dmuellerAATTsuse.de- build with non-executable stack
* Tue Jul 26 2005 schwabAATTsuse.de- Ignore directory part on saved file name [#79292].
* Tue Apr 19 2005 kukukAATTsuse.de- Remove uncompress symlink [#78331]
* Thu Mar 24 2005 wernerAATTsuse.de- Add support for bzip2 and simply pager options to zmore
* Mon May 03 2004 schwabAATTsuse.de- Fix quoting issues in zgrep [#39329].
* Fri Feb 27 2004 schwabAATTsuse.de- Add %defattr.
* Tue Dec 02 2003 pthomasAATTsuse.de- Remove the patch for tail syntax as it\'s wrong and unnecessary.
* Thu Sep 18 2003 mmjAATTsuse.de- Fix tail syntax in gzexe [#31229]
* Thu Aug 28 2003 kukukAATTsuse.de- Make sure we have no hardlinks from /bin to /usr/bin [Bug #29522]
* Tue Jun 17 2003 pthomasAATTsuse.de- Update to 1.3.5 - gzip now removes any output symlink before writing output file. - zgrep etc. scripts now port to POSIX 1003.1-2001 hosts. - zforce no longer assumes 14-byte file name length limit. - zless is now implemented using less and LESSOPEN, not zmore and PAGER. - assembly-language speedups reenabled; were mistakenly disabled in 1.3. - Less output is lost when decompressing a truncated file. - zgrep now supports --, -H, -h, -L, -l, -C, -d, -m and their long equivalents.
* Wed Jun 04 2003 jhAATTsuse.de- Enable profile feedback
* Thu Apr 24 2003 roAATTsuse.de- fix install_info --delete call and move from preun to postun
* Tue Apr 15 2003 cooloAATTsuse.de- use BuildRoot
* Sat Feb 08 2003 kukukAATTsuse.de- Readded prereq for install-info, else we cannot install info pages- Add dir entry to info page
* Sat Feb 08 2003 roAATTsuse.de- removed prereq for texinfo to avoid prereq-cycle
* Fri Feb 07 2003 roAATTsuse.de- added install_info macros
* Wed Jan 29 2003 kukukAATTsuse.de- Remove mimencode requires, it is optional
* Tue Dec 17 2002 wernerAATTsuse.de- The `:\' line of zgrep will be removed by configure- zgrep requzires mimencode from metamail
* Tue Sep 17 2002 roAATTsuse.de- removed bogus self-provides
* Thu Mar 14 2002 kukukAATTsuse.de- Add uncompress compat link
* Wed Feb 06 2002 cooloAATTsuse.de- use %suse_update_config
* Thu Jan 24 2002 okirAATTsuse.de- fixed tempfile race in zdiff (current code used bash noclobber which is inherently racey)
* Wed Jun 06 2001 wernerAATTsuse.de- Make zgrep knowing about bzip2
* Tue Apr 03 2001 uliAATTsuse.de- fixed for gcc >2.96
* Tue Mar 27 2001 bkAATTsuse.de- use i686 insn scheduling on i386 and strip binaries(performance)- make tmpfiles in gzexe secure and improve znew tempdir creation- remove unnessary expr use and fix gzip output checking in zforce- add simple tests if gzip/gunzip work
* Mon Nov 27 2000 ajAATTsuse.de- Update to gzip 1.3.
* Wed Aug 23 2000 wernerAATTsuse.de- Security changes for the znew script
* Mon May 01 2000 kukukAATTsuse.de- LSB-FHS requires /bin/gunzip and /bin/zcat to /bin/gzip
* Tue Apr 18 2000 kukukAATTsuse.de- Add /bin/zcat (required by FHS 2.1)
* Fri Feb 25 2000 schwabAATTsuse.de- cleanup spec file, get rid of Makefile.Linux- define _GNU_SOURCE for basename declaration- /usr/man -> /usr/share/man- add gzip.info to file list
* Mon Sep 13 1999 bsAATTsuse.de- ran old prepare_spec on spec file to switch to new prepare_spec.
* Fri Mar 06 1998 florianAATTsuse.de- fixed security bug posted on Dez 27 to bugtraq
* Thu Jan 08 1998 bsAATTsuse.de- fixed \"double\" /bin/gzip & /usr/bin/gzip
* Thu Apr 24 1997 bsAATTsuse.de- added symlink /bin/gunzip
* Sun Apr 13 1997 florianAATTsuse.de- add bug-fixes from gnu.utils.bugs