Changelog for
squashfs-4.5.1-1.3.x86_64.rpm :
* Sun May 08 2022 Cristian Rodríguez
- set LZMA_XZ_SUPPORT=1 so you can (un)squash -comp lzma images
* Sun Mar 20 2022 Dirk Müller - update to 4.5.1 (bsc#1190531, CVE-2021-41072):
* This release adds Manpages for Mksquashfs(1), Unsquashfs(1), Sqfstar(1) and Sqfscat(1).
* The -help text output from the utilities has been improved and extended as well (but the Manpages are now more comprehensive).
* CVE-2021-41072 which is a writing outside of destination exploit, has been fixed.
* The number of hard-links in the filesystem is now also displayed by Mksquashfs in the output summary.
* The number of hard-links written by Unsquashfs is now also displayed in the output summary.
* Unsquashfs will now write to a pre-existing destination directory, rather than aborting.
* Unsquashfs now allows \".\" to used as the destination, to extract to the current directory.
* The Unsquashfs progress bar now tracks empty files and hardlinks, in addition to data blocks.
* -no-hardlinks option has been implemented for Sqfstar.
* More sanity checking for \"corrupted\" filesystems, including checks for multiply linked directories and directory loops.
* Options that may cause filesystems to be unmountable have been moved into a new \"experts\" category in the Mksquashfs help text (and Manpage).
* Maximum cpiostyle filename limited to PATH_MAX. This prevents attempts to overflow the stack, or cause system calls to fail with a too long pathname.
* Don\'t always use \"max open file limit\" when calculating length of queues, as a very large file limit can cause Unsquashfs to abort. Instead use the smaller of max open file limit and cache size.
* Fix Mksquashfs silently ignoring Pseudo file definitions when appending.
* Don\'t abort if no XATTR support has been built in, and there\'s XATTRs in the filesystem. This is a regression introduced in 2019 in Version 4.4.
* Fix duplicate check when the last file block is sparse.
* Sat Dec 11 2021 Dirk Müller - update to 4.5:
* Mksquashfs now supports \"Actions\".
* New sqfstar command which will create a Squashfs image from a tar archive.
* Tar style handling of source pathnames in Mksquashfs.
* Cpio style handling of source pathnames in Mksquashfs.
* New option to throttle the amount of CPU and I/O.
* Mksquashfs now allows no source directory to be specified.
* New Pseudo file \"R\" definition which allows a Regular file o be created with data stored within the Pseudo file.
* Symbolic links are now followed in extract files
* Unsquashfs now supports \"exclude\" files.
* Max depth traversal option added.
* Unsquashfs can now output a \"Pseudo file\" representing the input Squashfs filesystem.
* New -one-file-system option in Mksquashfs.
* New -no-hardlinks option in Mksquashfs.
* Exit code in Unsquashfs changed to distinguish between non-fatal errors (exit 2), and fatal errors (exit 1).
* Xattr id count added in Unsquashfs \"-stat\" output.
* Unsquashfs \"write outside directory\" exploit fixed.
* Error handling in Unsquashfs writer thread fixed.
* Fix failure to truncate destination if appending aborted.
* Prevent Mksquashfs reading the destination file.
* Tue Sep 01 2020 Björn Voigt - enabled ZSTD compression support for openSUSE >= 15.1
* Tue Mar 31 2020 Martin Liška - Add -fcommon in order to fix boo#1160294.
* Mon Oct 21 2019 Philipp Seiler - Version 4.4 - 2019-08-29:
* Reproducible builds, new compressors, CVE fixes, security hardening and new options for Mksquashfs/Unsquashfs.- Overall improvements:
* Mksquashfs now generates reproducible images by default.
* Mkfs time and file timestamps can also be specified.
* Support for the Zstandard (ZSTD) compression algorithm.
* CVE-2015-4645 and CVE-2015-4646 have been fixed.- Mksquashfs improvements and major bug fixes:
* Pseudo files now support symbolic links.
* New -mkfs-time option.
* New -all-time option.
* New -root-mode option.
* New -quiet option.
* New -noId option.
* New -offset option.
* Update lz4 wrapper to use new functions introduced in 1.7.0.
* Bug fix, don\'t allow \"/\" pseudo filenames.
* Bug fix, allow quoting of pseudo files, to better handle filenames with spaces.
* Fix compilation with glibc 2.25+.- Unsquashfs improvements and major bug fixes:
* CVE-2015-4645 and CVE-2015-4646 have been fixed.
* Unsquashfs has been further hardened against corrupted filestems.
* Unsquashfs is now more strict about error handling.
* New -ignore-errors option.
* New -strict-errors option.
* New -lln[umeric] option.
* New -lc option.
* New -llc option.
* New -mkfs-time option.
* New -UTC option.
* New -offset option.
* New -quiet option.
* Update lz4 wrapper to use new functions introduced in 1.7.0.
* Bug fix, fatal and non-fatal errors now set the exit code to 1.
* Bug fix, fix time setting for symlinks.
* Bug fix, try to set sticky-bit when running as a user process.
* Fix compilation with glibc 2.25+.- build changes:
* re-created patches to fit squashfs 4.4
* removed 0001-mksquashfs-fix-rare-race-in-fragment-waiting-in-file.patch (new version includes this change)
* removed 0002-Fix-2GB-limit-of-the-is_fragment-.-function.patch (new version includes this change)
* removed 0003-Add-offset-function-to-skip-n-bytes.patch (new version includes this change)
* removed sysmacros.patch (new version includes this change)
* Wed Jun 05 2019 Philipp - Add -offset function to skip n bytes at the beginning of the squashfs… https://github.com/plougher/squashfs-tools/commit/5a498ad24dcfeac9f3d747e894f22901f3ac10 (0003-Add-offset-function-to-skip-n-bytes.patch)
* Wed Apr 24 2019 Martin Liška - Disable LTO (boo#1133284).
* Wed Mar 20 2019 dsterbaAATTsuse.cz- Use | instead of / that can be part of -L or -I options.
* Wed Mar 20 2019 Dominique Leuenberger - Use / as sed command delimiter. Comma can actually show up in optflags (think -Wl,…), which then breaks the sed command line parsing.
* Wed Aug 01 2018 schwabAATTsuse.de- sysmacros.patch: Include for major/minor/makedev
