Ubuntu
libzip package

  1. Bug #1674057
  2. Comment #3

Comment 3 for bug 1674057

Revision history for this message
Tim Lunn (darkxst) wrote : Re: [needs packaging] upgrade libzip to version 1.20

From a quick look not sure how feasible this is to get into Bionic this late in the cycle?

Quick Summary of changes (https://libzip.org/news/):
- There is a 1.3.2 build in Debian experimental, but hasnt progressed into unstable yet
- A couple of CVE fixes (these should probably be cherry-picked regardless)
- A bunch of bug fixes
- A number of new features like bzip2, improved AES encryption support, some of the new features are other platforms only
- Breaks API, soname bump, so will require a mini transition, all the 23-odd reverse-depends that I count are in universe though. Have not yet checked if any of these are affected by the API changes or can just be rebuilt.
- they appear to have dropped their custom AES implementation in favour of using openssl (this should be a plus!)
- Build system switched to Cmake in latest release