From f319b98aade2a337c74b9a3b48c6daffb7809cda Mon Sep 17 00:00:00 2001 From: Mark Wielaard Date: Thu, 27 Jun 2019 20:10:07 +0200 Subject: Prepare for 1.0.7 release. --- CHANGES | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) (limited to 'CHANGES') diff --git a/CHANGES b/CHANGES index 94a9b66..d9b4c05 100644 --- a/CHANGES +++ b/CHANGES @@ -2,7 +2,7 @@ This file is part of bzip2/libbzip2, a program and library for lossless, block-sorting data compression. - bzip2/libbzip2 version 1.0.6 of 6 September 2010 + bzip2/libbzip2 version 1.0.7 of 27 June 2019 Copyright (C) 1996-2010 Julian Seward Please read the WARNING, DISCLAIMER and PATENTS sections in the @@ -325,3 +325,16 @@ Security fix only. Fixes CERT-FI 20469 as it applies to bzip2. Izdebski. * Make the documentation build on Ubuntu 10.04 + +1.0.7 (27 Jun 19) +~~~~~~~~~~~~~~~~~ + +* Fix undefined behavior in the macros SET_BH, CLEAR_BH, & ISSET_BH + +* bzip2: Fix return value when combining --test,-t and -q. + +* bzip2recover: Fix buffer overflow for large argv[0] + +* bzip2recover: Fix use after free issue with outFile (CVE-2016-3189) + +* Make sure nSelectors is not out of range (CVE-2019-12900) -- cgit v1.2.3-55-g6feb