Subject: CVS commit: [pkgsrc-2005Q1] pkgsrc/archivers/bzip2
To: None <pkgsrc-changes@NetBSD.org>
From: Soren Jacobsen <snj@netbsd.org>
List: pkgsrc-changes
Date: 05/27/2005 00:46:13
Module Name:	pkgsrc
Committed By:	snj
Date:		Fri May 27 00:46:12 UTC 2005

Modified Files:
	pkgsrc/archivers/bzip2 [pkgsrc-2005Q1]: Makefile PLIST buildlink3.mk
	    distinfo
	pkgsrc/archivers/bzip2/patches [pkgsrc-2005Q1]: patch-aa

Log Message:
Pullup ticket 516 - requested by Lubomir Sedlacik
security update for bzip2

Revisions pulled up:
- pkgsrc/archivers/bzip2/PLIST			1.3
- pkgsrc/archivers/bzip2/Makefile		1.39
- pkgsrc/archivers/bzip2/buildlink3.mk		1.17
- pkgsrc/archivers/bzip2/distinfo		1.12
- pkgsrc/archivers/bzip2/patches/patch-aa	1.11

    Module Name:    pkgsrc
    Committed By:   rillig
    Date:           Mon May 23 06:49:29 UTC 2005

    Modified Files:
            pkgsrc/archivers/bzip2: PLIST

    Log Message:
    Sorted PLIST entries to make pkglint happy.
    ----
    Module Name:    pkgsrc
    Committed By:   salo
    Date:           Thu May 26 15:03:11 UTC 2005

    Modified Files:
            pkgsrc/archivers/bzip2: Makefile buildlink3.mk distinfo
            pkgsrc/archivers/bzip2/patches: patch-aa

    Log Message:
    Security update to version 1.0.3

    - Further robustification against corrupted compressed data.
        There are currently no known bitstreams which can cause the
      decompressor to crash, loop or access memory which does not
      belong to it.  If you are using bzip2 or the library to
      decompress bitstreams from untrusted sources, an upgrade
      to 1.0.3 is recommended.

      http://scary.beasts.org/security/CESA-2005-002.txt

    - The documentation has been converted to XML, from which html
        and pdf can be derived.

    - Various minor bugs in the documentation have been fixed.

    - Fixes for various compilation warnings with newer versions of
        gcc, and on 64-bit platforms.

    - The BZ_NO_STDIO cpp symbol was not properly observed in 1.0.2.
        This has been fixed.


To generate a diff of this commit:
cvs rdiff -r1.37 -r1.37.4.1 pkgsrc/archivers/bzip2/Makefile
cvs rdiff -r1.2 -r1.2.4.1 pkgsrc/archivers/bzip2/PLIST
cvs rdiff -r1.16 -r1.16.4.1 pkgsrc/archivers/bzip2/buildlink3.mk
cvs rdiff -r1.11 -r1.11.2.1 pkgsrc/archivers/bzip2/distinfo
cvs rdiff -r1.10 -r1.10.8.1 pkgsrc/archivers/bzip2/patches/patch-aa

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.