From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 114043 invoked by alias); 13 Jul 2019 18:56:54 -0000 Mailing-List: contact bzip2-devel-help@sourceware.org; run by ezmlm Precedence: bulk List-Post: List-Help: List-Subscribe: List-Id: Sender: bzip2-devel-owner@sourceware.org Received: (qmail 114034 invoked by uid 89); 13 Jul 2019 18:56:53 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Checked: by ClamAV 0.100.3 on sourceware.org X-Virus-Found: No X-Spam-SWARE-Status: No, score=-6.7 required=5.0 tests=AWL,BAYES_00,SPF_PASS autolearn=ham version=3.3.1 spammy=docshtml, UD:docs.html, docs.html X-Spam-Status: No, score=-6.7 required=5.0 tests=AWL,BAYES_00,SPF_PASS autolearn=ham version=3.3.1 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on sourceware.org X-Spam-Level: X-HELO: gnu.wildebeest.org Message-ID: <6e0d885d845484b1f304bfca5b141c094d1f33b1.camel@klomp.org> Subject: bzip2 1.0.8 released From: Mark Wielaard To: bzip2-devel@sourceware.org Cc: lwn@lwn.net, Julian Seward Date: Tue, 01 Jan 2019 00:00:00 -0000 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Evolution 3.28.5 (3.28.5-2.el7) Mime-Version: 1.0 X-Spam-Flag: NO X-SW-Source: 2019-q3/txt/msg00031.txt.bz2 We are happy to announce the release of bzip2 1.0.8. This is an fixup release because the CVE-2019-12900 fix in bzip2 1.0.7 was too strict and might have prevented decompression of some files that earlier bzip2 versions could decompress. And it contains a few more patches from various distros and forks. bzip2 1.0.8 contains the following fixes: * Accept as many selectors as the file format allows. This relaxes the fix for CVE-2019-12900 from 1.0.7 so that bzip2 allows decompression of bz2 files that use (too) many selectors again. * Fix handling of large (> 4GB) files on Windows. * Cleanup of bzdiff and bzgrep scripts so they don't use any bash extensions and handle multiple archives correctly. * There is now a bz2-files testsuite at https://sourceware.org/git/bzip2-tests.git Patches by Joshua Watt, Mark Wielaard, Phil Ross, Vincent Lefevre, Led and Krist=C3=BDna Streitov=C3=A1. This release also finalizes the move of bzip2 to a community maintained project at https://sourceware.org/bzip2/ - Git repository: https://sourceware.org/git/bzip2.git - Public (developer) mailinglist: bzip2-devel@sourceware.org To subscribe to the bzip2 development list send email to bzip2-devel-subscribe@sourceware.org. You do not have to be subscribed to sent messages to the list. - Mailinglist archive: https://sourceware.org/ml/bzip2-devel/ - Bug tracker: https://sourceware.org/bugzilla/buglist.cgi?product=3Dbzip2 - Documentation: https://sourceware.org/bzip2/docs.html - Latest and historical downloads ftp://sourceware.org/pub/bzip2/ https://sourceware.org/pub/bzip2/ - Extended testsuite https://sourceware.org/git/bzip2-tests.git Thanks to Bhargava Shastry bzip2 is now also part of oss-fuzz to catch fuzzing issues early and (hopefully not) often.