Changelog for squashfs-4.6.1-81.33.x86_64.rpm :

* Mon Jul 03 2023 Torsten Duwe - For reference: previous updates fixed
* CVE-2021-40153 (bsc#1189936)
* CVE-2015-4645, CVE-2015-4646 (bsc#935380)
* Sat Apr 15 2023 Dirk Müller - update to 4.6.1:
* Race condition which can cause corruption of the \"fragment table\" fixed. This is a regression introduced in August 2022, and it has been seen when tailend packing is used (-tailends option).
* Fix build failure when the tools are being built without extended attribute (XATTRs) support.
* Fix XATTR error message when an unrecognised prefix is found
* Fix incorrect free of pointer when an unrecognised XATTR prefix is found.
* Major improvements in extended attribute handling, pseudo file handling, and miscellaneous new options and improvements
* Extended attribute handling improved in Mksquashfs and Sqfstar
* New Pseudo file xattr definition to add extended attributes to files.
* New xattrs-add Action to add extended attributes to files
* Extended attribute handling improved in Unsquashfs
* Other major improvements
* Unsquashfs can now output Pseudo files to standard out.
* Mksquashfs can now input Pseudo files from standard in.
* Squashfs filesystems can now be converted (different block size compression etc) without unpacking to an intermediate filesystem or mounting, by piping the output of Unsquashfs to Mksquashfs.
* Pseudo files are now supported by Sqfstar.
* \"Non-anchored\" excludes are now supported by Unsquashfs.
* Fri Oct 14 2022 Torsten Duwe - Do not repeat openSUSE / SLE version tests- Actually format and package the man pages
* Sun May 08 2022 Cristian Rodríguez - set LZMA_XZ_SUPPORT=1 so you can (un)squash -comp lzma images
* Sun Mar 20 2022 Dirk Müller - update to 4.5.1 (bsc#1190531, CVE-2021-41072):
* This release adds Manpages for Mksquashfs(1), Unsquashfs(1), Sqfstar(1) and Sqfscat(1).
* The -help text output from the utilities has been improved and extended as well (but the Manpages are now more comprehensive).
* CVE-2021-41072 which is a writing outside of destination exploit, has been fixed.
* The number of hard-links in the filesystem is now also displayed by Mksquashfs in the output summary.
* The number of hard-links written by Unsquashfs is now also displayed in the output summary.
* Unsquashfs will now write to a pre-existing destination directory, rather than aborting.
* Unsquashfs now allows \".\" to used as the destination, to extract to the current directory.
* The Unsquashfs progress bar now tracks empty files and hardlinks, in addition to data blocks.
* -no-hardlinks option has been implemented for Sqfstar.
* More sanity checking for \"corrupted\" filesystems, including checks for multiply linked directories and directory loops.
* Options that may cause filesystems to be unmountable have been moved into a new \"experts\" category in the Mksquashfs help text (and Manpage).
* Maximum cpiostyle filename limited to PATH_MAX. This prevents attempts to overflow the stack, or cause system calls to fail with a too long pathname.
* Don\'t always use \"max open file limit\" when calculating length of queues, as a very large file limit can cause Unsquashfs to abort. Instead use the smaller of max open file limit and cache size.
* Fix Mksquashfs silently ignoring Pseudo file definitions when appending.
* Don\'t abort if no XATTR support has been built in, and there\'s XATTRs in the filesystem. This is a regression introduced in 2019 in Version 4.4.
* Fix duplicate check when the last file block is sparse.
* Sat Dec 11 2021 Dirk Müller - update to 4.5:
* Mksquashfs now supports \"Actions\".
* New sqfstar command which will create a Squashfs image from a tar archive.
* Tar style handling of source pathnames in Mksquashfs.
* Cpio style handling of source pathnames in Mksquashfs.
* New option to throttle the amount of CPU and I/O.
* Mksquashfs now allows no source directory to be specified.
* New Pseudo file \"R\" definition which allows a Regular file o be created with data stored within the Pseudo file.
* Symbolic links are now followed in extract files
* Unsquashfs now supports \"exclude\" files.
* Max depth traversal option added.
* Unsquashfs can now output a \"Pseudo file\" representing the input Squashfs filesystem.
* New -one-file-system option in Mksquashfs.
* New -no-hardlinks option in Mksquashfs.
* Exit code in Unsquashfs changed to distinguish between non-fatal errors (exit 2), and fatal errors (exit 1).
* Xattr id count added in Unsquashfs \"-stat\" output.
* Unsquashfs \"write outside directory\" exploit fixed.
* Error handling in Unsquashfs writer thread fixed.
* Fix failure to truncate destination if appending aborted.
* Prevent Mksquashfs reading the destination file.
* Tue Sep 01 2020 Björn Voigt - enabled ZSTD compression support for openSUSE >= 15.1
* Tue Mar 31 2020 Martin Liška - Add -fcommon in order to fix boo#1160294.
* Mon Oct 21 2019 Philipp Seiler - Version 4.4 - 2019-08-29:
* Reproducible builds, new compressors, CVE fixes, security hardening and new options for Mksquashfs/Unsquashfs.- Overall improvements:
* Mksquashfs now generates reproducible images by default.
* Mkfs time and file timestamps can also be specified.
* Support for the Zstandard (ZSTD) compression algorithm.
* CVE-2015-4645 and CVE-2015-4646 have been fixed.- Mksquashfs improvements and major bug fixes:
* Pseudo files now support symbolic links.
* New -mkfs-time option.
* New -all-time option.
* New -root-mode option.
* New -quiet option.
* New -noId option.
* New -offset option.
* Update lz4 wrapper to use new functions introduced in 1.7.0.
* Bug fix, don\'t allow \"/\" pseudo filenames.
* Bug fix, allow quoting of pseudo files, to better handle filenames with spaces.
* Fix compilation with glibc 2.25+.- Unsquashfs improvements and major bug fixes:
* CVE-2015-4645 and CVE-2015-4646 have been fixed.
* Unsquashfs has been further hardened against corrupted filestems.
* Unsquashfs is now more strict about error handling.
* New -ignore-errors option.
* New -strict-errors option.
* New -lln[umeric] option.
* New -lc option.
* New -llc option.
* New -mkfs-time option.
* New -UTC option.
* New -offset option.
* New -quiet option.
* Update lz4 wrapper to use new functions introduced in 1.7.0.
* Bug fix, fatal and non-fatal errors now set the exit code to 1.
* Bug fix, fix time setting for symlinks.
* Bug fix, try to set sticky-bit when running as a user process.
* Fix compilation with glibc 2.25+.- build changes:
* re-created patches to fit squashfs 4.4
* removed 0001-mksquashfs-fix-rare-race-in-fragment-waiting-in-file.patch (new version includes this change)
* removed 0002-Fix-2GB-limit-of-the-is_fragment-.-function.patch (new version includes this change)
* removed 0003-Add-offset-function-to-skip-n-bytes.patch (new version includes this change)
* removed sysmacros.patch (new version includes this change)
* Wed Jun 05 2019 Philipp - Add -offset function to skip n bytes at the beginning of the squashfs… https://github.com/plougher/squashfs-tools/commit/5a498ad24dcfeac9f3d747e894f22901f3ac10 (0003-Add-offset-function-to-skip-n-bytes.patch)