* New checkpoint action: totals
* Extended checkpoint format specification.
* New option --one-top-level
* New option --sort
* New exclusion options
* Manpages
'Fixed a potential integer overflow condition in the "safe" decompressor
variants which could result in a possible buffer overrun when processing
maliciously crafted compressed input data.
As this issue only affects 32-bit systems and also can only happen if
you use uncommonly huge buffer sizes where you have to decompress more
than 16 MiB (2^24 bytes) compressed bytes within a single function call,
the practical implications are limited.'
See http://www.openwall.com/lists/oss-security/2014/06/26/20 for more
details, there are also some embedded copies of "minilzo" from the same
source in various other programs which are also affected by this
stop other people wasting time on updates which should not be done.
ian@ ran into this (while working on devel/hs-aeson and
textproc/hs-attoparsec), and even I didn't notice before trying to
build all Haskell ports (including meta/haskell-platform) with his
diffs.
* Fix unquoting of file names obtained via the -T option.
* Fix GNU long link header timestamp (backward compatibility).
* Fix extracting sparse members from star archives.
LZ4 is a very fast lossless compression algorithm, providing compression
speed at 400 MB/s per core, scalable with multi-cores CPU. It also features
an extremely fast decoder, with speed in multiple GB/s per core, typically
reaching RAM speed limits on multi-core systems. The library is BSD-licensed.
one of gzip or bzip2. Lzip decompresses almost as fast as gzip and
compresses more than bzip2, which makes it well suited for software
distribution and data archiving.
Lzip is a clean implementation of the LZMA algorithm. The lzip file
format is designed for long-term data archiving. It is clean, provides
very safe 4 factor integrity checking. Lzip uses the same well-defined
exit status values used by bzip2, which makes it safer when used in
pipes or scripts than compressors returning ambiguous warning values,
like gzip.
ok sthen@
