public inbox for bzip2-devel@sourceware.org
 help / color / mirror / Atom feed
From: Mark Wielaard <mark@klomp.org>
To: bzip2-devel@sourceware.org
Cc: lwn@lwn.net, Julian Seward <jseward@acm.org>
Subject: bzip2 1.0.8 released
Date: Tue, 01 Jan 2019 00:00:00 -0000	[thread overview]
Message-ID: <6e0d885d845484b1f304bfca5b141c094d1f33b1.camel@klomp.org> (raw)

We are happy to announce the release of bzip2 1.0.8.

This is an fixup release because the CVE-2019-12900 fix
in bzip2 1.0.7 was too strict and might have prevented
decompression of some files that earlier bzip2 versions
could decompress. And it contains a few more patches from
various distros and forks.

bzip2 1.0.8 contains the following fixes:

* Accept as many selectors as the file format allows.
  This relaxes the fix for CVE-2019-12900 from 1.0.7
  so that bzip2 allows decompression of bz2 files that
  use (too) many selectors again.

* Fix handling of large (> 4GB) files on Windows.

* Cleanup of bzdiff and bzgrep scripts so they don't use
  any bash extensions and handle multiple archives correctly.

* There is now a bz2-files testsuite at
  https://sourceware.org/git/bzip2-tests.git

Patches by Joshua Watt, Mark Wielaard, Phil Ross, Vincent Lefevre,
Led and Kristýna Streitová.

This release also finalizes the move of bzip2 to a community
maintained project at https://sourceware.org/bzip2/

- Git repository:
  https://sourceware.org/git/bzip2.git
- Public (developer) mailinglist:
  bzip2-devel@sourceware.org
  To subscribe to the bzip2 development list send email to
  bzip2-devel-subscribe@sourceware.org.
  You do not have to be subscribed to sent messages to the list.
- Mailinglist archive:
  https://sourceware.org/ml/bzip2-devel/
- Bug tracker:
  https://sourceware.org/bugzilla/buglist.cgi?product=bzip2
- Documentation:
  https://sourceware.org/bzip2/docs.html
- Latest and historical downloads
  ftp://sourceware.org/pub/bzip2/
  https://sourceware.org/pub/bzip2/
- Extended testsuite
  https://sourceware.org/git/bzip2-tests.git

Thanks to Bhargava Shastry bzip2 is now also part of oss-fuzz
to catch fuzzing issues early and (hopefully not) often.

                 reply	other threads:[~2019-07-13 18:56 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=6e0d885d845484b1f304bfca5b141c094d1f33b1.camel@klomp.org \
    --to=mark@klomp.org \
    --cc=bzip2-devel@sourceware.org \
    --cc=jseward@acm.org \
    --cc=lwn@lwn.net \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).