Author: Nobuto Murata
Revision Date: 2015-08-23 13:43:30 UTC

* add fallback charsets for Windows archives in CJKV+th locale,
  inspired by Ubuntu Kylin way, LP: #1422290
* add autopkgtest to make sure all of 3 types of zip files can be
  extracted properly

Author: Marc Deslauriers
Revision Date: 2015-05-22 12:31:51 UTC

* Resynchronise with Debian. Remaining changes:
  - Add patch from archlinux which adds the -O option, allowing a charset
    to be specified for the proper unzipping of non-Latin and non-Unicode
    filenames.

Author: Marc Deslauriers
Revision Date: 2015-05-22 12:31:51 UTC

* Resynchronise with Debian. Remaining changes:
  - Add patch from archlinux which adds the -O option, allowing a charset
    to be specified for the proper unzipping of non-Latin and non-Unicode
    filenames.

Author: Marc Deslauriers
Revision Date: 2015-02-17 14:22:58 UTC

* SECURITY UPDATE: heap overflow in charset_to_intern()
  - debian/patches/20-unzip60-alt-iconv-utf8: updated to fix buffer
    overflow in unix/unix.c.
  - CVE-2015-1315
* SECURITY REGRESSION: regression with executable jar files
  - debian/patches/09-cve-2014-8139-crc-overflow: updated to fix
    regression.
* SECURITY REGRESSION: regression with certain compressed data headers
  - debian/patches/12-cve-2014-9636-test-compr-eb: updated to fix
    regression.

Author: Marc Deslauriers
Revision Date: 2015-02-17 14:22:58 UTC

* SECURITY UPDATE: heap overflow in charset_to_intern()
  - debian/patches/20-unzip60-alt-iconv-utf8: updated to fix buffer
    overflow in unix/unix.c.
  - CVE-2015-1315
* SECURITY REGRESSION: regression with executable jar files
  - debian/patches/09-cve-2014-8139-crc-overflow: updated to fix
    regression.
* SECURITY REGRESSION: regression with certain compressed data headers
  - debian/patches/12-cve-2014-9636-test-compr-eb: updated to fix
    regression.

Author: Marc Deslauriers
Revision Date: 2015-02-17 14:19:20 UTC

* SECURITY UPDATE: heap overflow in charset_to_intern()
  - debian/patches/04-unzip60-alt-iconv-utf8: updated to fix buffer
    overflow in unix/unix.c.
  - CVE-2015-1315
* SECURITY REGRESSION: regression with executable jar files
  - debian/patches/09-cve-2014-8139-crc-overflow: updated to fix
    regression.
* SECURITY REGRESSION: regression with certain compressed data headers
  - debian/patches/12-cve-2014-9636-test-compr-eb: updated to fix
    regression.

Author: Marc Deslauriers
Revision Date: 2015-02-17 14:19:20 UTC

* SECURITY UPDATE: heap overflow in charset_to_intern()
  - debian/patches/04-unzip60-alt-iconv-utf8: updated to fix buffer
    overflow in unix/unix.c.
  - CVE-2015-1315
* SECURITY REGRESSION: regression with executable jar files
  - debian/patches/09-cve-2014-8139-crc-overflow: updated to fix
    regression.
* SECURITY REGRESSION: regression with certain compressed data headers
  - debian/patches/12-cve-2014-9636-test-compr-eb: updated to fix
    regression.

Author: Marc Deslauriers
Revision Date: 2015-02-17 14:17:20 UTC

* SECURITY UPDATE: heap overflow in charset_to_intern()
  - debian/patches/06-unzip60-alt-iconv-utf8: updated to fix buffer
    overflow in unix/unix.c.
  - CVE-2015-1315
* SECURITY REGRESSION: regression with executable jar files
  - debian/patches/09-cve-2014-8139-crc-overflow: updated to fix
    regression.
* SECURITY REGRESSION: regression with certain compressed data headers
  - debian/patches/12-cve-2014-9636-test-compr-eb: updated to fix
    regression.

Author: Marc Deslauriers
Revision Date: 2015-02-17 14:17:20 UTC

* SECURITY UPDATE: heap overflow in charset_to_intern()
  - debian/patches/06-unzip60-alt-iconv-utf8: updated to fix buffer
    overflow in unix/unix.c.
  - CVE-2015-1315
* SECURITY REGRESSION: regression with executable jar files
  - debian/patches/09-cve-2014-8139-crc-overflow: updated to fix
    regression.
* SECURITY REGRESSION: regression with certain compressed data headers
  - debian/patches/12-cve-2014-9636-test-compr-eb: updated to fix
    regression.

Author: Marc Deslauriers
Revision Date: 2015-02-17 14:10:47 UTC

* SECURITY UPDATE: heap overflow in charset_to_intern()
  - debian/patches/20-unzip60-alt-iconv-utf8: updated to fix buffer
    overflow in unix/unix.c.
  - CVE-2015-1315
* SECURITY REGRESSION: regression with executable jar files
  - debian/patches/09-cve-2014-8139-crc-overflow: updated to fix
    regression.
* SECURITY REGRESSION: regression with certain compressed data headers
  - debian/patches/12-cve-2014-9636-test-compr-eb: updated to fix
    regression.

Author: Marc Deslauriers
Revision Date: 2015-02-17 14:10:47 UTC

* SECURITY UPDATE: heap overflow in charset_to_intern()
  - debian/patches/20-unzip60-alt-iconv-utf8: updated to fix buffer
    overflow in unix/unix.c.
  - CVE-2015-1315
* SECURITY REGRESSION: regression with executable jar files
  - debian/patches/09-cve-2014-8139-crc-overflow: updated to fix
    regression.
* SECURITY REGRESSION: regression with certain compressed data headers
  - debian/patches/12-cve-2014-9636-test-compr-eb: updated to fix
    regression.

Author: Marc Deslauriers
Revision Date: 2015-01-29 11:39:12 UTC

* SECURITY UPDATE: heap overflow via mismatched block sizes
  - extract.c: ensure compressed and uncompressed block sizes match when
    using STORED method.
  - CVE-2014-9636

Author: Marc Deslauriers
Revision Date: 2015-01-29 11:39:12 UTC

* SECURITY UPDATE: heap overflow via mismatched block sizes
  - extract.c: ensure compressed and uncompressed block sizes match when
    using STORED method.
  - CVE-2014-9636

Author: Colin Watson
Revision Date: 2014-06-05 10:03:44 UTC

* Resynchronise with Debian. Remaining changes:
  - Add patch from archlinux which adds the -O option, allowing a charset
    to be specified for the proper unzipping of non-Latin and non-Unicode
    filenames.

Author: Colin Watson
Revision Date: 2014-06-05 10:03:44 UTC

* Resynchronise with Debian. Remaining changes:
  - Add patch from archlinux which adds the -O option, allowing a charset
    to be specified for the proper unzipping of non-Latin and non-Unicode
    filenames.

Author: Brian Murray
Revision Date: 2013-11-06 09:40:08 UTC

Fix incorrectly displayed file names with UTF-8 characters.
Add -DNO_WORKING_ISPRINT to build flags. (LP: #1199239, LP: #580961)

Author: Brian Murray
Revision Date: 2013-11-06 10:31:34 UTC

Fix incorrectly displayed file names with UTF-8 characters.
Add -DNO_WORKING_ISPRINT to build flags. (LP: #1199239, LP: #580961)

Author: Brian Murray
Revision Date: 2013-11-06 10:21:26 UTC

Fix incorrectly displayed file names with UTF-8 characters.
Add -DNO_WORKING_ISPRINT to build flags. (LP: #1199239, LP: #580961)

Author: Brian Murray
Revision Date: 2013-11-06 09:40:08 UTC

Fix incorrectly displayed file names with UTF-8 characters.
Add -DNO_WORKING_ISPRINT to build flags. (LP: #1199239, LP: #580961)

Author: Brian Murray
Revision Date: 2013-11-06 10:31:34 UTC

Fix incorrectly displayed file names with UTF-8 characters.
Add -DNO_WORKING_ISPRINT to build flags. (LP: #1199239, LP: #580961)

Author: Colin Watson
Revision Date: 2013-05-13 13:00:12 UTC

* Resynchronise with Debian. Remaining changes:
  - Add patch from archlinux which adds the -O option, allowing a charset
    to be specified for the proper unzipping of non-Latin and non-Unicode
    filenames.

Author: Colin Watson
Revision Date: 2013-05-13 13:00:12 UTC

* Resynchronise with Debian. Remaining changes:
  - Add patch from archlinux which adds the -O option, allowing a charset
    to be specified for the proper unzipping of non-Latin and non-Unicode
    filenames.

Author: Colin Watson
Revision Date: 2013-05-13 13:00:12 UTC

* Resynchronise with Debian. Remaining changes:
  - Add patch from archlinux which adds the -O option, allowing a charset
    to be specified for the proper unzipping of non-Latin and non-Unicode
    filenames.

Author: Colin Watson
Revision Date: 2012-12-13 16:08:03 UTC

* Resynchronise with Debian. Remaining changes:
  - Add patch from archlinux which adds the -O option, allowing a charset
    to be specified for the proper unzipping of non-Latin and non-Unicode
    filenames.
  - Use correct strip program when cross-building.

Author: Logan Rosen
Revision Date: 2012-08-05 21:31:45 UTC

* Merge from Debian unstable. Remaining change:
  - Added patch from archlinux which adds the -O option allowing a charset
  to be specified for the proper unzipping of non-latin and non-unicode
  filenames.
* Merge adds Multi-Arch: foreign. (LP: #1010450)

Author: Brian Thomason
Revision Date: 2011-01-12 20:08:14 UTC

Added patch from archlinux which adds the -O option allowing a charset
to be specified for the proper unzipping of non-latin and non-unicode
filenames. (LP: #580961)

Author: Brian Thomason
Revision Date: 2011-01-12 20:08:14 UTC

Added patch from archlinux which adds the -O option allowing a charset
to be specified for the proper unzipping of non-latin and non-unicode
filenames. (LP: #580961)

Author: Peter Pearse
Revision Date: 2011-04-27 13:58:08 UTC

Use correct strip when cross building.

Author: Brian Thomason
Revision Date: 2011-01-12 20:08:14 UTC

Added patch from archlinux which adds the -O option allowing a charset
to be specified for the proper unzipping of non-latin and non-unicode
filenames. (LP: #580961)

Author: Santiago Vila
Revision Date: 2010-02-21 17:01:00 UTC

* Added homepage field to control file.
* Switch to 3.0 (quilt) source format.
* Support cross-build.

Author: Alexander Sack
Revision Date: 2010-03-07 01:10:12 UTC

rebuild rest of main for armel armv7/thumb2 optimization;
UbuntuSpec:mobile-lucid-arm-gcc-v7-thumb2

Author: Michael Vogt
Revision Date: 2008-11-12 16:51:21 UTC

* Merge from debian unstable, remaining changes:
  - debian/rules: Configure with large file support.
  - unzip.c: Change banner to indicate Ubuntu modification.
  - support UTF-8 file names.

Author: Matthias Klose
Revision Date: 2008-06-25 15:57:03 UTC

* Merge with Debian; remaining changes:
  - debian/rules: Configure with large file support.
  - unzip.c: Change banner to indicate Ubuntu modification.
  - support UTF-8 file names.

Author: Kees Cook
Revision Date: 2008-03-19 12:08:30 UTC

* SECURITY UPDATE: arbitrary code execution via heap corruption.
* inflate.c: fix invalid free() calls, patch from Tavis Ormandy.
* References
  CVE-2008-0888

Author: Kees Cook
Revision Date: 2008-03-19 12:08:30 UTC

* SECURITY UPDATE: arbitrary code execution via heap corruption.
* inflate.c: fix invalid free() calls, patch from Tavis Ormandy.
* References
  CVE-2008-0888

Author: Kees Cook
Revision Date: 2008-03-19 12:08:30 UTC

* SECURITY UPDATE: arbitrary code execution via heap corruption.
* inflate.c: fix invalid free() calls, patch from Tavis Ormandy.
* References
  CVE-2008-0888

Author: Matthias Klose
Revision Date: 2007-07-17 10:03:01 UTC

* Merge with Debian; remaining changes:
  - debian/rules: Configure with large file support.
  - unzip.c: Change banner to indicate Ubuntu modification.
  - support UTF-8 file names.

Author: Kees Cook
Revision Date: 2008-03-19 12:08:30 UTC

* SECURITY UPDATE: arbitrary code execution via heap corruption.
* inflate.c: fix invalid free() calls, patch from Tavis Ormandy.
* References
  CVE-2008-0888

Author: Kees Cook
Revision Date: 2008-03-19 12:08:30 UTC

* SECURITY UPDATE: arbitrary code execution via heap corruption.
* inflate.c: fix invalid free() calls, patch from Tavis Ormandy.
* References
  CVE-2008-0888

Author: Matthias Klose
Revision Date: 2007-03-31 13:10:40 UTC

Apply patch from https://bugzilla.altlinux.org/long_list.cgi?buglist=4871
to support UTF-8 file names. Ubuntu #10979.

Author: Kees Cook
Revision Date: 2008-03-19 12:08:30 UTC

* SECURITY UPDATE: arbitrary code execution via heap corruption.
* inflate.c: fix invalid free() calls, patch from Tavis Ormandy.
* References
  CVE-2008-0888

Author: Kees Cook
Revision Date: 2008-03-19 12:08:30 UTC

* SECURITY UPDATE: arbitrary code execution via heap corruption.
* inflate.c: fix invalid free() calls, patch from Tavis Ormandy.
* References
  CVE-2008-0888

Author: Martin Pitt
Revision Date: 2006-06-30 11:28:40 UTC

* Merge from debian unstable; only Ubuntu changes left:
  - debian/rules: Configure with large file support.
  - unzip.c: Change banner to indicate Ubuntu modification.

Author: Kees Cook
Revision Date: 2008-03-19 12:08:30 UTC

* SECURITY UPDATE: arbitrary code execution via heap corruption.
* inflate.c: fix invalid free() calls, patch from Tavis Ormandy.
* References
  CVE-2008-0888

Author: Kees Cook
Revision Date: 2008-03-19 12:08:30 UTC

* SECURITY UPDATE: arbitrary code execution via heap corruption.
* inflate.c: fix invalid free() calls, patch from Tavis Ormandy.
* References
  CVE-2008-0888

Author: Martin Pitt
Revision Date: 2006-03-23 13:00:08 UTC

* const.h, process.c: Limit the maximum length of displayed file names to
  512 bytes, to avoid spewage with excessively long file names (which caused
  buffer overflows until the recent security fix for CVE-2005-4667).
* Thanks to Santiago Vila for pointing this out.

Author: Martin Pitt
Revision Date: 2006-02-15 12:26:32 UTC

Previous security update scrambled the output fields in the contents
listing, fix that regression.

Author: Martin Pitt
Revision Date: 2005-09-29 17:02:50 UTC

* SECURITY UPDATE: Fix file permission modification race.
* unix/unix.c: Use fchmod() instead of chmod() to change permissions on the
  files unzip actually created, not the files another attacker might have
  hardlinked to in the meantime.
* CAN-2005-2475

Author: Martin Pitt
Revision Date: 2006-02-15 11:30:16 UTC

Previous security update scrambled the output fields in the contents
listing, fix that regression.

Author: Thom May
Revision Date: 2005-02-28 15:25:52 UTC

Fixed unzip of >2GB files, thanks to patch from ard at kwaak.net

Author: Martin Pitt
Revision Date: 2006-02-15 12:33:47 UTC

Previous security update scrambled the output fields in the contents
listing, fix that regression.

Author: Santiago Vila
Revision Date: 2004-06-06 17:57:46 UTC

Added unshrinking support (Closes: #252563).

Author: Santiago Vila
Revision Date: 2009-05-08 20:02:40 UTC

* New upstream release. Closes: #496989.
* Enabled new Unicode support. Closes: #197427. This may or may not work
  for your already created zipfiles, but it's not a bug unless they were
  created using the Unicode feature present in zip 3.0.
* Built using DATE_FORMAT=DF_YMD so that unzip -l show dates in ISO format,
  as that's the only available one which makes sense. Closes: #312886.
* Enabled new bzip2 support. Closes: #426798.
* Exit code for zipgrep should now be the right one. Closes: #441997.
* The reason why a file may not be created is now shown. Closes: #478791.
* Summary of changes in this version not being the debian/* files:
- Manpages in section 1, not 1L.
- Branding patch. UnZip by Debian. Original by Info-ZIP.
- Always #include <unistd.h>. Debian GNU/kFreeBSD needs it.