Subject: CVS commit: pkgsrc/archivers/zziplib
From: S.P.Zeidler
Date: 2017-05-15 10:40:21
Message id: 20170515084021.511F5FBE4@cvs.NetBSD.org

Log Message:
update from 0.13.59 to v0.13.66
fixing: CVE-2017-5974 CVE-2017-5975 CVE-2017-5976 CVE-2017-5978 CVE-2017-5981

Upstream changelog:
2017-04-24  guidod  <guidod@gmx.de>
    * common frontend 'unzzip.c' for example code in unzzip*-xx.c
    * expand testcases to cover all of big/mem/mix/zap variants
    * release v0.13.66

2017-04-23  guidod  <guidod@gmx.de>
    * turn the testsuite from makefile into python unittest format
    * extend 'make check' testsuite to cover non-libzzip extensions
    * fix unzzipcat-seeko and unzzipcat-mem to match the testsuite
    * release v0.13.65

2017-04-20  guidod  <guidod@gmx.de>
    * check patches in opensuse builds, mostly for some CVE reports

2012-09-15  guidod  <guidod@gmx.de>
    * zzip.h, plugin.h: "};" at end of extern-C produces build errors with
       the default --pedantic-errors on newer CMake. Thanks to Keith Thompson
       recognizing it - see http://stackoverflow.com/questions/12384280/

2012-03-11  guidod  <guidod@gmx.de>

	* configure.ac: fallback to libtool -export-dynamic unless being sure to
	   use gnu-ld --export-dynamic. The darwin case is a bit special here
	   as the c-compiler and linker might be from different worlds.
	* next 0.13.62 - needs a fix for mingw
	   (-mconsole is not a linker option, only the gcc should see it)

2010-12-30 guidod <guidod@gmx.de>
        * done 0.13.60 release, tagged, and announced.
        * prepare 0.13.61

2010-12-29 guidod <guidod@gmx.de>
        * Makefile.am: allow nonstaic build
        * wrap fd.open like in the Fedora patch

2010-12-28 guidod <guidod@gmx.de>
        * zziplib.spec - simplify the spec based on distro specs.

2010-12-27 guidod <guidod@gmx.de>
        * adding fetch.h/fetch.c to msvc8/zziplib.vcproj to allow
          tests with Visual Studio C++ Express 2005

2010-12-27 guidod <guidod@gmx.de>
        * fix stat.c to check ZZIP_CASELESS instead of the deprecated
          ZZIP_CASEINSENSITIVE. The latter is still recognized for
          compatibility reasons and implicitly mapped to ZZIP_CASELESS.
        * fixes the zziplib-Patches-3078188 which reported the bug.

2010-12-27 guidod <guidod@gmx.de>
        * apply patches by Peter Breitenlohner for better compatibility
          with AIX host system. Also the Sun Studio compiler insists on
          static inline functions or else assumes extern inline.
        * also fixes zziplib-Patches-3011551 on the AIX problem.

2010-12-27 guidod <guidod@gmx.de>
        * add hints that the ext_io plugin handlers should be static.

2010-05-09  guidod  <guidod@gmx.de>

	* zzip/__fnmatch.h: add include <string.h> to make mingw32 happy.
	     Patches item #2995373 by Gregory Smith

2010-05-08  guidod  <guidod@gmx.de>

	* SDL/Makefile.am: fix generation of sdl-uninstalled.pc that was
	   not recognized during compilation.

2010-04-05  guidod  <guidod@gmx.de>

	* Makefile.am: fix "osc rm" and fix "test-sdl" if SDL was \ 
not found.
	* configure.ac: SDL example builds on pkgconfig/sdl.pc which

	    was introduced with SDL 1.2.11 - CentOs5 ships 1.2.10 which
	    does only have "sdl-config" and it made for a mismatch in
	    in the build configuration: sdl-devel yes, pkgconfig sdl no.
	* zzip/zip.c (__zzip_parse_root_directory): move the check for
	     zzip_disk_entry_check_magic to be after the the check that
	     the seek-value is more than a header's size before the end.
	     (based on a segfault report by Tulipánt Gergely when the
	      new modulo_entries code is enabled (which is off by default))

2010-03-30  guidod  <guidod@gmx.de>

	* zzip/Makefile.am:  fixing symlinks for lib* - use only for Linux
	    Thanks to Ryan Schmidt (macports):
		... likes to install some symlinks that don't make sense on Mac OS X:
		$ ls -l /opt/local/lib/*zzip*so*
		lrwxr-xr-x  /opt/local/lib/libzzip*.so.10 -> libzzip*.so.13
		lrwxr-xr-x  /opt/local/lib/libzzip*.so.11 -> libzzip*.so.13
		lrwxr-xr-x  /opt/local/lib/libzzip*.so.12 -> libzzip*.so.13
		Yes, the filenames literally contain an asterisk.

Files:
RevisionActionfile
1.6modifypkgsrc/archivers/zziplib/patches/patch-aa
1.20modifypkgsrc/archivers/zziplib/Makefile
1.8modifypkgsrc/archivers/zziplib/PLIST
1.14modifypkgsrc/archivers/zziplib/distinfo
1.5modifypkgsrc/archivers/zziplib/patches/patch-ba
1.4modifypkgsrc/archivers/zziplib/patches/patch-bb
1.1removepkgsrc/archivers/zziplib/patches/patch-zzip_zip.c