Commit Graph

15 Commits

Author SHA1 Message Date
Mark Wielaard
6a8690fc8d Prepare for 1.0.8 release. 2019-07-13 17:17:58 +02:00
Mark Wielaard
f319b98aad Prepare for 1.0.7 release. 2019-06-27 20:10:07 +02:00
Mark Wielaard
c1cdd98db3 bzip2recover: Fix use after free issue with outFile.
bzip2recover.c (main): Make sure to set outFile to NULL when done.

This was reported as CVE-2016-3189 and found in multiple distributions.
https://seclists.org/oss-sec/2016/q2/568

Some more analysis can be found in:
https://bugzilla.redhat.com/show_bug.cgi?id=1319648
2019-06-24 00:58:47 +02:00
Mark Wielaard
833548edc0 bzip2recover: Fix buffer overflow for large argv[0].
bzip2recover.c (main) copies argv[0] to a statically sized buffer
without checking whether argv[0] might be too big (> 2000 chars).

This patch comes from Fedora and was originally reported at
https://bugzilla.redhat.com/show_bug.cgi?id=226979
2019-06-24 00:14:06 +02:00
Mark Wielaard
5b923861db Change Julian's email address to jseward@acm.org 2019-03-30 22:56:16 +01:00
Julian Seward
962d60610c bzip2-1.0.6 2010-09-06 22:13:13 +02:00
Julian Seward
a1d78c5501 bzip2-1.0.5 2007-12-10 22:13:13 +01:00
Julian Seward
f10a33538e bzip2-1.0.4 2006-12-20 22:13:13 +01:00
Julian Seward
4d540bfc95 bzip2-1.0.3 2005-02-15 22:13:13 +01:00
Julian Seward
099d844292 bzip2-1.0.2 2001-12-30 22:13:13 +01:00
Julian Seward
795b859eee bzip2-1.0.1 2000-06-24 22:13:13 +02:00
Julian Seward
f93cd82a9a bzip2-0.9.5d 1999-09-04 22:13:13 +02:00
Julian Seward
977101ad5f bzip2-0.9.0c 1998-08-23 22:13:13 +02:00
Julian Seward
1eb67a9d8f bzip2-0.1pl2 1997-08-29 22:13:13 +02:00
Julian Seward
33d1340302 bzip2-0.1 1997-08-07 22:13:13 +02:00