[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

bzip2 1.0.8 released



We are happy to announce the release of bzip2 1.0.8.

This is an fixup release because the CVE-2019-12900 fix
in bzip2 1.0.7 was too strict and might have prevented
decompression of some files that earlier bzip2 versions
could decompress. And it contains a few more patches from
various distros and forks.

bzip2 1.0.8 contains the following fixes:

* Accept as many selectors as the file format allows.
  This relaxes the fix for CVE-2019-12900 from 1.0.7
  so that bzip2 allows decompression of bz2 files that
  use (too) many selectors again.

* Fix handling of large (> 4GB) files on Windows.

* Cleanup of bzdiff and bzgrep scripts so they don't use
  any bash extensions and handle multiple archives correctly.

* There is now a bz2-files testsuite at
  https://sourceware.org/git/bzip2-tests.git

Patches by Joshua Watt, Mark Wielaard, Phil Ross, Vincent Lefevre,
Led and Kristýna Streitová.

This release also finalizes the move of bzip2 to a community
maintained project at https://sourceware.org/bzip2/

- Git repository:
  https://sourceware.org/git/bzip2.git
- Public (developer) mailinglist:
  bzip2-devel@sourceware.org
  To subscribe to the bzip2 development list send email to
  bzip2-devel-subscribe@sourceware.org.
  You do not have to be subscribed to sent messages to the list.
- Mailinglist archive:
  https://sourceware.org/ml/bzip2-devel/
- Bug tracker:
  https://sourceware.org/bugzilla/buglist.cgi?product=bzip2
- Documentation:
  https://sourceware.org/bzip2/docs.html
- Latest and historical downloads
  ftp://sourceware.org/pub/bzip2/
  https://sourceware.org/pub/bzip2/
- Extended testsuite
  https://sourceware.org/git/bzip2-tests.git

Thanks to Bhargava Shastry bzip2 is now also part of oss-fuzz
to catch fuzzing issues early and (hopefully not) often.