Bernd Kuhls
947dea9308
package/libzip: bump version to 1.6.1
...
Use new upstream URL libzip.org.
Add optional dependency to liblzma introduced with version 1.6.0:
https://libzip.org/news/
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
[yann.morin.1998@free.fr: two spaces in hash file]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2020-04-20 23:22:27 +02:00
Jörg Krause
12227863eb
package/libzip: bump to version 1.5.2
...
Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2019-04-30 19:58:59 +02:00
Fabrice Fontaine
d1972e13dd
libzip: bump to version 1.5.1
...
- Remove patch (already in version)
- Update hash of license file: AES section has been removed:
https://github.com/nih-at/libzip/commit/303fde909ffb1725f9926bed7be33b3abc87a107
The AES section was BSD-3-Clause as well, so nothing changes in
LIBZIP_LICENSE.
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be >
2018-07-08 12:17:03 +02:00
Matt Weber
13f554f530
libzip: update legal hash for 1.4.0
...
The copyright was updated in the LICENSES file
Fixes (one of many):
http://autobuild.buildroot.net/results/a64/a64ddf630aa44c7b0353f5a6818beffd20712615/
Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2018-01-06 09:25:05 +01:00
Baruch Siach
b7da7469de
libzip: bump to version 1.4.0
...
Upstream switched to cmake.
Add upstream patch that removes run of target binary on the host.
Cc: Bartosz Golaszewski <brgl@bgdev.pl >
Signed-off-by: Baruch Siach <baruch@tkos.co.il >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2018-01-05 16:16:39 +01:00
Peter Korsgaard
f77fb7b585
libzip: security bump to version 1.3.0
...
Fixes the following security issues:
CVE-2017-12858: Double free vulnerability in the _zip_dirent_read function
in zip_dirent.c in libzip allows attackers to have unspecified impact via
unknown vectors.
CVE-2017-14107: The _zip_read_eocd64 function in zip_open.c in libzip before
1.3.0 mishandles EOCD records, which allows remote attackers to cause a
denial of service (memory allocation failure in _zip_cdir_grow in
zip_dirent.c) via a crafted ZIP archive.
For more details, see
https://blogs.gentoo.org/ago/2017/09/01/libzip-use-after-free-in-_zip_buffer_free-zip_buffer-c/
https://blogs.gentoo.org/ago/2017/09/01/libzip-memory-allocation-failure-in-_zip_cdir_grow-zip_dirent-c/
libzip-1.3.0 also adds optional bzip2 support, so handle that.
While we're at it, add a hash for the license file.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2017-09-08 11:16:56 +02:00
Bartosz Golaszewski
7b846fc07f
libzip: bump version to 1.2.0
...
It's a major release, but the API seems to be mostly
backwards-compatible. The only package depending on this library in
buildroot is libsigrok and it builds fine.
Signed-off-by: Bartosz Golaszewski <brgl@bgdev.pl >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
2017-07-02 00:43:31 +02:00
Gustavo Zacarias
7ccf520d1c
libzip: add hash file
...
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
2015-07-28 22:32:57 +02:00
Bernd Kuhls