lp:ubuntu/dapper-proposed/gzip

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

4. By Martin Pitt on 2008-05-06

gzip.c: Remove the input file after successfully closing the output file.
Before, copy_stat() removed the output file already, and close() was
called afterwards. However, close() can fail on network file systems, and
thus you would previously end up with a deleted input file and no output
file. Patch backported from version 1.3.12-1 (applied in Edgy and later).
(LP: #69510)

3. By Martin Pitt on 2006-09-14

* SECURITY UPDATE: Arbitrary code execution or DoS with specially crafted
  gzipped/compress'ed files. Tavis Ormandy did a comprehensive security
  review, applied his patch to fix the following issues:
* NULL Dereference [CVE-2006-4334].
* Buffer overflows in LZH uncompressor's make_table() [CVE-2006-4335,
  CVE-2006-4337].
* Buffer underflow in gzip unpacker's build_tree() [CVE-2006-4336].
* Infinite loop in LZH uncompressor [CVE-2006-4338].

2. By Bdale Garbee on 2005-07-11

* merge patch from Matt Zimmerman for futex hang due to improper signal
  handling, closes: #310053, #315612
* merge patch to add --rsyncable to the man page, closes: #289616, #295721
* don't return failing result code on harmless warning, closes: #169669

1. By Matt Zimmerman on 2004-10-13

Import upstream version 1.3.5