File lzo.changes of Package lzo
-------------------------------------------------------------------
Wed Jul 2 11:35:21 UTC 2014 - mrueckert@suse.de
- update to 2.08 (bnc#883947) CVE-2014-4607
- Updated the Autoconf scripts to fix some reported build
problems.
- Added CMake build support.
- Fixed lzo_init() on big-endian architectures like Sparc.
- additional changes in 2.07
* Fixed a potential integer overflow condition in the "safe"
decompressor variants which could result in a possible buffer
overrun when processing maliciously crafted compressed input
data.
Fortunately this issue only affects 32-bit systems and also can
only happen if you use uncommonly huge buffer sizes where you
have to decompress more than 16 MiB (> 2^24 bytes) untrusted
compressed bytes within a single function call, so the
practical implications are limited.
POTENTIAL SECURITY ISSUE. CVE-2014-4607.
* Removed support for ancient configurations like 16-bit "huge"
pointers - LZO now requires a flat 32-bit or 64-bit memory
model.
* Assorted cleanups.
-------------------------------------------------------------------
Tue Apr 16 12:26:44 UTC 2013 - mmeister@suse.com
- Added url as source.
Please see http://en.opensuse.org/SourceUrls
-------------------------------------------------------------------
Mon Aug 27 14:57:29 UTC 2012 - cfarrell@suse.com
- license update: GPL-2.0+
No GPL-2.0 "only" licenses found in the package
-------------------------------------------------------------------
Sat Feb 11 19:32:14 UTC 2012 - crrodriguez@opensuse.org
- move libraries back to %{_libdir}, /usr merge project
-------------------------------------------------------------------
Sun Sep 25 17:06:01 UTC 2011 - crrodriguez@opensuse.org
- Update to version 2.06
* Some minor optimizations for big-endian architectures.
* Fixed overly strict malloc() misalignment check in examples.
-------------------------------------------------------------------
Fri May 6 13:51:51 UTC 2011 - crrodriguez@opensuse.org
- Update to version 2.05
* Converted the configure system to non-recursive Automake.
* Applied some overdue speed optimizations for modern x86/x64 architectures
and current compilers like gcc 4.6 and MSVC 2010.
-------------------------------------------------------------------
Wed Dec 22 03:29:01 UTC 2010 - aj@suse.de
- Fix specfile (remove deleted lzo-2.03-alias.patch).
-------------------------------------------------------------------
Fri Nov 12 11:09:42 UTC 2010 - mrueckert@suse.de
- update to 2.0.4
* Fixed a gcc-4.5 aliasing issue in lzo_init().
* Updated the configure system.
* Assorted cleanups.
- dropped lzo-2.03-alias.patch:
solved differently upstream
- dropped debug_package_requires define
-------------------------------------------------------------------
Sat Oct 30 19:05:43 UTC 2010 - cristian.rodriguez@opensuse.org
- Use GCC visibility.
-------------------------------------------------------------------
Thu Feb 11 12:30:25 CET 2010 - rguenther@suse.de
- fix aliasing problems
-------------------------------------------------------------------
Sat Dec 19 16:48:18 CET 2009 - jengelh@medozas.de
- add baselibs.conf as a source
- enable parallel build
-------------------------------------------------------------------
Wed Jan 7 12:34:56 CET 2009 - olh@suse.de
- obsolete old -XXbit packages (bnc#437293)
-------------------------------------------------------------------
Fri Aug 22 15:55:23 CEST 2008 - mrueckert@suse.de
- update to 2.03
featuring major speedups for 64-bit architectures like AMD64,
minor overall speedups, portability enhancements for LLP64
programming models, and lots of other small improvements
- dropped lzo-noexec.patch: fix included upstream
- split out liblzo2-2
- move the lib to /%_lib
-------------------------------------------------------------------
Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de
- added baselibs.conf file to build xxbit packages
for multilib support
-------------------------------------------------------------------
Mon Feb 25 06:27:57 CET 2008 - crrodriguez@suse.de
- run ldconfig
-------------------------------------------------------------------
Mon Feb 12 16:20:47 CET 2007 - meissner@suse.de
- added marker for nonexec stack/heap to i386 assembler.
-------------------------------------------------------------------
Wed Sep 27 14:24:04 CEST 2006 - poeml@suse.de
- add BuildRequires: gcc-c++ for building on Fedora
-------------------------------------------------------------------
Wed Jan 25 21:38:07 CET 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Mon Jan 16 16:02:20 CET 2006 - mrueckert@suse.de
- update to version 2.02
-------------------------------------------------------------------
Mon Sep 26 21:36:34 CEST 2005 - mls@suse.de
- make devel package require base package
-------------------------------------------------------------------
Tue Jun 28 10:59:59 CEST 2005 - cthiel@suse.de
- update to version 2.01
-------------------------------------------------------------------
Thu Jun 2 11:03:35 CEST 2005 - hvogel@suse.de
- update to version 2.0
-------------------------------------------------------------------
Fri Jan 9 16:21:11 CET 2004 - adrian@suse.de
- move devel files to -devel package
-------------------------------------------------------------------
Wed Aug 20 14:37:01 CEST 2003 - cwh@suse.de
- initial release
