-
zlib (1:1.2.11.dfsg-2ubuntu1.5) focal-security; urgency=medium
* SECURITY UPDATE: heap-based buffer over-read (LP: #1988548)
- debian/patches/CVE-2022-37434-1.patch: in inflate.c, add an extra
condition to check if state->head->extra_max is greater than len
before copying, and move the len assignment to be placed before the
check.
- debian/patches/CVE-2022-37434-2.patch: in the previous patch, in
inflate.c, the place of the len assignment was causing issues so it
was moved to be placed within the check.
- CVE-2022-37434
-- Rodrigo Figueiredo Zaiden <email address hidden> Fri, 14 Oct 2022 17:22:43 -0300
-
zlib (1:1.2.11.dfsg-2ubuntu1.4) focal; urgency=medium
* d/p/410-lp1961427.patch ported from zlib #410, fixing
compressBound() with hw acceleration. LP: #1961427
Thanks to Ilya Leoshkevich <email address hidden>.
In addition a patch is needed in htslib.
-- Frank Heimes <email address hidden> Thu, 21 Jul 2022 10:30:05 +0100
-
zlib (1:1.2.11.dfsg-2ubuntu1.3) focal-security; urgency=medium
* SECURITY UPDATE: memory corruption when deflating
- debian/patches/CVE-2018-25032-1.patch: fix a bug that can crash
deflate on some input when using Z_FIXED in deflate.c, deflate.h.
- debian/patches/CVE-2018-25032-2.patch: assure that the number of bits
for deflatePrime() is valid in deflate.c.
- CVE-2018-25032
-- Marc Deslauriers <email address hidden> Sat, 26 Mar 2022 14:20:54 -0400
-
zlib (1:1.2.11.dfsg-2ubuntu1.2) focal; urgency=medium
* Cherrypick update of s390x hw acceleration #410 pull request patch,
which corrects inflateSyncPoint() return value to always gracefully
fail when hw acceleration is in use. This fixes rsync failure with
zlib compression on hw accelerated s390x. LP: #1899621
-- Dimitri John Ledkov <email address hidden> Thu, 15 Oct 2020 11:10:29 +0100
-
zlib (1:1.2.11.dfsg-2ubuntu1.1) focal; urgency=medium
* Update d/patches/410.patch to current state to fix issues with hardware
accelerated zlib on new s390x machines. LP: #1893170
-- Michael Hudson-Doyle <email address hidden> Thu, 20 Aug 2020 11:52:59 +1200
-
zlib (1:1.2.11.dfsg-2ubuntu1) focal; urgency=medium
* Merge with Debian; remaining changes:
- Build x32 packages
- debian/zlib-core.symbols: Drop dfsg suffix from version
- Add watch file, with GPG tarball checking, and version mangling
- Drop unused patches
- Cherry-pick Permit-a-deflateParams-parameter-change-asap.patch:
(LP: #1692870)
- Cherrypick PR#410 to enable hardware-accelerated deflate.
- Copmile with DFLTCC enabled on s390x. LP: #1823157
- Improve crc32 performance on P8, proposed upstream patch. LP: #1742941.
zlib (1:1.2.11.dfsg-2) unstable; urgency=low
* Acknowledge previous NMUs (closes: #949388).
* Remove zlib1g-dbg in favour of dbgsym (closes: #497831, #926161).
* Rename stage1 to nobiarch, patch no longer applies due to
uncoordinated NMUs (closes: #892762).
* Debhelper has renamed -s to -a.
* Policy 4.5.0 (no changes).
zlib (1:1.2.11.dfsg-1.2ubuntu1) focal; urgency=medium
* Merge with Debian; remaining changes:
- Build x32 packages
- debian/zlib-core.symbols: Drop dfsg suffix from version
- Add watch file, with GPG tarball checking, and version mangling
- Drop unused patches
- Cherry-pick Permit-a-deflateParams-parameter-change-asap.patch:
(LP: #1692870)
- Cherrypick PR#410 to enable hardware-accelerated deflate.
- Copmile with DFLTCC enabled on s390x. LP: #1823157
* Improve crc32 performance on P8, proposed upstream patch. LP: #1742941.
zlib (1:1.2.11.dfsg-1.2) unstable; urgency=medium
* Non-maintainer upload.
* Fix ftbfs on mips64el caused by the previous NMU by
remove it from 32-ARCHS to keep NMU minial.
zlib (1:1.2.11.dfsg-1.1) unstable; urgency=medium
* Non-maintainer upload.
* Enable lib64 for mipsn32 mipsn32el mipsr6 mipsr6el mipsn32r6 mipsn32r6el x32
help to add binutils-host64 for 32bit architectures (Closes: 949388)
* Remove outdated binutils version requirement for mips/mipsel.
-- Matthias Klose <email address hidden> Tue, 25 Feb 2020 16:59:52 +0100
-
zlib (1:1.2.11.dfsg-1.2ubuntu1) focal; urgency=medium
* Merge with Debian; remaining changes:
- Build x32 packages
- debian/zlib-core.symbols: Drop dfsg suffix from version
- Add watch file, with GPG tarball checking, and version mangling
- Drop unused patches
- Cherry-pick Permit-a-deflateParams-parameter-change-asap.patch:
(LP: #1692870)
- Cherrypick PR#410 to enable hardware-accelerated deflate.
- Copmile with DFLTCC enabled on s390x. LP: #1823157
* Improve crc32 performance on P8, proposed upstream patch. LP: #1742941.
zlib (1:1.2.11.dfsg-1.2) unstable; urgency=medium
* Non-maintainer upload.
* Fix ftbfs on mips64el caused by the previous NMU by
remove it from 32-ARCHS to keep NMU minial.
zlib (1:1.2.11.dfsg-1.1) unstable; urgency=medium
* Non-maintainer upload.
* Enable lib64 for mipsn32 mipsn32el mipsr6 mipsr6el mipsn32r6 mipsn32r6el x32
help to add binutils-host64 for 32bit architectures (Closes: 949388)
* Remove outdated binutils version requirement for mips/mipsel.
-- Matthias Klose <email address hidden> Mon, 24 Feb 2020 12:57:03 +0100
-
zlib (1:1.2.11.dfsg-1ubuntu3) eoan; urgency=medium
* Cherrypick PR#410 to enable hardware-accelerated deflate.
* Copmile with DFLTCC enabled on s390x. LP: #1823157
-- Dimitri John Ledkov <email address hidden> Mon, 19 Aug 2019 19:51:09 +0100
