19 Commits

Author SHA1 Message Date
bcallah
23204591f9 Update to libzip-1.5.1 -- biggest change is the use of libcrypto instead of
a custom AES implementation.
ok sthen@
2018-04-23 21:48:07 +00:00
bcallah
b01beb866e Update libzip to 1.4.0 -- now using CMake and enabling bzip2
ok sthen@
2018-01-09 23:10:43 +00:00
bcallah
4c7bbfa002 Update to libzip 1.3.2 -- adds a new function, so minor bump.
All consumers are happy with this.
2017-11-20 19:13:23 +00:00
bcallah
8e8af2aba4 Update libzip to 1.3.0
Security:
* CVE-2017-12858: Fix double free().
* CVE-2017-14107: Improve EOCD64 parsing.

Other fixes:
* Improve file progress callback code
* Fix zip_fdopen()

ok sthen@
2017-09-08 13:05:30 +00:00
bcallah
6ca11fd9c9 Update to 1.2.0 -- take maintainer
Major bump to SHARED_LIB due to symbols being removed from the library.
Changelog: https://nih.at/libzip/NEWS.html
ok kirby@
2017-07-06 07:57:33 +00:00
jca
60816bbf68 Maintenance update to libzip-1.1.3 2016-08-27 07:49:48 +00:00
jasper
d9e62c8094 update to libzip-1.1.2 2016-05-04 06:09:55 +00:00
naddy
c253f424ca garbage collect CONFIGURE_SHARED 2016-03-11 19:59:11 +00:00
jasper
89d6207e73 update to libzip-1.0.1 2015-05-11 21:22:19 +00:00
sthen
9500439bfe Patch libzip for CVE-2015-2331; int overflow leading to a heap overflow.
Upstream's patch depends on other changes; for us, we can simplify things
and just use reallocarray.
2015-04-03 18:20:49 +00:00
jca
baeffaa417 Update to libzip-0.11.2. ok brad@ 2014-01-21 22:27:34 +00:00
brad
ffe6844fac sync distinfo and merge in PFRAG.shared.
ok sthen@
2013-04-04 16:03:55 +00:00
ajacoutot
58f1a6f9f6 USE_LIBTOOL=Yes is the default now. 2013-03-21 08:45:11 +00:00
espie
c80849c13c regress -> test
PERMIT_* cleanup
2013-03-10 22:28:04 +00:00
sthen
7d45705a7c SECURITY update to libzip 0.10.1
CVE-2012-1162 heap overflow on corrupted zip files
CVE-2012-1163 integer overflow

more info at http://www.openwall.com/lists/oss-security/2012/03/21/2
2012-03-21 10:30:22 +00:00
shadchin
65586efaf2 Properly fix the "missing" header.
From Brad.
2011-05-31 02:33:21 +00:00
shadchin
0712322ce9 * added missing header zipconf.h
* added missing man pages
* fix missing end of block in two man pages

ok jasper@
2011-05-30 16:53:40 +00:00
jasper
29fe8310c6 - update libzip to 0.10.0, fixes CVE-2011-0421,
libzip "_zip_name_locate()" NULL Pointer Dereference Vulnerability
2011-03-22 09:20:15 +00:00
jasper
fb6d30f3b5 import libzip 0.9.3
libzip is a C library for reading, creating, and modifying zip archives.
Files can be added from data buffers, files, or compressed data copied
directly from other zip archives. Changes made without closing the
archive can be reverted.

ok sthen@
2010-11-27 09:16:57 +00:00