lp:ubuntu/dapper-security/bzip2

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

9. By Jamie Strandboge on 2010-09-09

* SECURITY UPDATE: fix integer overflow in BZ2_decompress()
  - decompress.c: return error if N is larger than 2*1024^2 which keeps es
    from overflowing but leaves enough room for the 900k maximum value of
    the RUNA/RUNB encoding
  - patch from upstream
  - CVE-2010-0405

8. By Kees Cook on 2008-03-19

* SECURITY UPDATE: denial of service via heap memory corruption.
* bzlib.c, bzlib_private.h: upstream patch from 1.0.5 applied inline.
* References
  CVE-2008-1372

7. By Matthias Klose on 2006-03-16

Don't use ia32-libs* (build-) dependencies anymore.

6. By Matthias Klose on 2005-12-31

* New upstream version.
* Synchronise with Debian unstable.

5. By Tollef Fog Heen on 2005-11-10

* Resynchronise with Debian.
  - Still generate 64 bit packages

4. By Matthias Klose on 2005-08-12

* Build 64bit packages to replace amd64-libs.
* Build 32bit packages on amd64 (currently disabled).

3. By Anibal Monsalve Salazar <email address hidden> on 2004-10-27

* New maintainer.
* Updated package to Policy 3.6.1.1.
* The package description does not follow Debian policy
  (Closes: #209811, #210074).

2. By Philippe Troin <email address hidden> on 2002-02-06

* New upstream version; closes: #132318. Most of our patches merged
  upstream.
* Generate copyright automatically from debian/rules.

1. By Philippe Troin <email address hidden> on 2002-02-06

Import upstream version 1.0.2