V0.10.0
--------
- Considered the modes of emblemized icons. This is especially relevant to Qt
icon engines that colorize selected symbolic icons.
- Get the mimetypes of symlinks directly, without consulting their targets
(because their targets may be symlinks themselves and so, they aren't
reliable).
- First try the file manager DBus interface when opening the containing folder.
- Removed the action for opening the containing folder when running as root
(because there are DBus complications with most file managers).
- Added read-only support for VirtualBox Extension Pack.
- With 7z, don't show password prompt when the archive can't be read and
there's no mention of encryption.
- Enabled compilation against Qt6. With cmake, "ENABLE_QT5" should be set to
"OFF" (as in `cmake .. -DENABLE_QT5=OFF`) — it's "ON" by default.
5.2.6 (2022-08-12)
* xz:
- The --keep option now accepts symlinks, hardlinks, and
setuid, setgid, and sticky files. Previously this required
using --force.
- When copying metadata from the source file to the destination
file, don't try to set the group (GID) if it is already set
correctly. This avoids a failure on OpenBSD (and possibly on
a few other OSes) where files may get created so that their
group doesn't belong to the user, and fchown(2) can fail even
if it needs to do nothing.
- Cap --memlimit-compress to 2000 MiB instead of 4020 MiB on
MIPS32 because on MIPS32 userspace processes are limited
to 2 GiB of address space.
* liblzma:
- Fixed a missing error-check in the threaded encoder. If a
small memory allocation fails, a .xz file with an invalid
Index field would be created. Decompressing such a file would
produce the correct output but result in an error at the end.
Thus this is a "mild" data corruption bug. Note that while
a failed memory allocation can trigger the bug, it cannot
cause invalid memory access.
- The decoder for .lzma files now supports files that have
uncompressed size stored in the header and still use the
end of payload marker (end of stream marker) at the end
of the LZMA stream. Such files are rare but, according to
the documentation in LZMA SDK, they are valid.
doc/lzma-file-format.txt was updated too.
- Improved 32-bit x86 assembly files:
* Support Intel Control-flow Enforcement Technology (CET)
* Use non-executable stack on FreeBSD.
- Visual Studio: Use non-standard _MSVC_LANG to detect C++
standard version in the lzma.h API header. It's used to
detect when "noexcept" can be used.
* xzgrep:
- Fixed arbitrary command injection via a malicious filename
(CVE-2022-1271, ZDI-CAN-16587). A standalone patch for
this was released to the public on 2022-04-07. A slight
robustness improvement has been made since then and, if
using GNU or *BSD grep, a new faster method is now used
that doesn't use the old sed-based construct at all. This
also fixes bad output with GNU grep >= 3.5 (2020-09-27)
when xzgrepping binary files.
This vulnerability was discovered by:
cleemy desu wayo working with Trend Micro Zero Day Initiative
- Fixed detection of corrupt .bz2 files.
- Improved error handling to fix exit status in some situations
and to fix handling of signals: in some situations a signal
didn't make xzgrep exit when it clearly should have. It's
possible that the signal handling still isn't quite perfect
but hopefully it's good enough.
- Documented exit statuses on the man page.
- xzegrep and xzfgrep now use "grep -E" and "grep -F" instead
of the deprecated egrep and fgrep commands.
- Fixed parsing of the options -E, -F, -G, -P, and -X. The
problem occurred when multiple options were specied in
a single argument, for example,
echo foo | xzgrep -Fe foo
treated foo as a filename because -Fe wasn't correctly
split into -F -e.
- Added zstd support.
* xzdiff/xzcmp:
- Fixed wrong exit status. Exit status could be 2 when the
correct value is 1.
- Documented on the man page that exit status of 2 is used
for decompression errors.
- Added zstd support.
* xzless:
- Fix less(1) version detection. It failed if the version number
from "less -V" contained a dot.
* Translations:
- Added new translations: Catalan, Croatian, Esperanto,
Korean, Portuguese, Romanian, Serbian, Spanish, Swedish,
and Ukrainian
- Updated the Brazilian Portuguese translation.
- Added French man page translation. This and the existing
German translation aren't complete anymore because the
English man pages got a few updates and the translators
weren't reached so that they could update their work.
* Build systems:
- Windows: Fix building of resource files when config.h isn't
used. CMake + Visual Studio can now build liblzma.dll.
- Various fixes to the CMake support. Building static or shared
liblzma should work fine in most cases. In contrast, building
the command line tools with CMake is still clearly incomplete
and experimental and should be used for testing only.
v1.9.4:
perf : faster decoding speed (~+20%) on Apple Silicon platforms, by @zeux
perf : faster decoding speed (~+70%) for -BD4 setting in CLI
api : new function LZ4_decompress_safe_partial_usingDict() by @yawqi
api : lz4frame: ability to provide custom allocators at state creation
api : can skip checksum validation for improved decoding speed
api : new experimental unit lz4file for file i/o API, by @anjiahao1
api : new experimental function LZ4F_uncompressedUpdate(), by @alexmohr
cli : --list works on stdin input, by @Low-power
cli : --no-crc does not produce (compression) nor check (decompression) checksums
cli : fix: --test and --list produce an error code when parsing invalid input
cli : fix: support skippable frames when passed via stdin, reported by @davidmankin
build: fix: Makefile respects CFLAGS directives passed via environment variable
build: LZ4_FREESTANDING, new build macro for freestanding environments, by @t-mat
build: make and make test are compatible with -j parallel run
build: AS/400 compatibility, by @jonrumsey
build: Solaris 10 compatibility, by @pekdon
build: MSVC 2022 support, by @t-mat
build: improved meson script, by @eli-schwartz
doc : Updated LZ4 block format, provide an "implementation notes" section
The package changed with the addition of its libepoll-shim dependency.
Otherwise, we can get:
ERROR: libepoll-shim>=0.0.20210418 is not installed; can't buildlink files.
v3.8.1
Refreshed packaging.
Enrolled with Tidelift.
v3.8.0
Removed compatibility code.
v3.7.0
Require Python 3.7 or later.
v3.6.0
Only ``Path`` is exposed in the public API.
v3.5.1
Remove news file intended only for CPython.
1.21.0 (2022-06-28)
- Fix GH-8781 #ZipArchive deletes zip file with no contents and doesn't
update stat cache
- implement fseek for zip stream when possible with libzip 1.9.1
- Allow 8.2
0.18.0
Bundled zstd library upgraded from 1.5.1 to 1.5.2.
ZstdDecompressionObj now has an unused_data attribute. It will contain data beyond the fully decoded zstd frame data if said data exists.
ZstdDecompressionObj now has an unconsumed_tail attribute. This attribute currently always returns the empty bytes value (b"").
ZstdDecompressionObj now has an eof attribute returning whether the compressed data has been fully read.
Torrentzip converts zip archives to a standard format with some
pre-defined values, sorting the files, and using particular
compression settings so that running it on zip archives created by
other tools will always result in the same output. This helps e.g.
with sharing zip archives using BitTorrent (which is where the name
comes from).
1.9.0 [2022-06-13]
==================
* Add `zip_file_is_seekable()`.
* Improve compatibility with WinAES.
* Fix encoding handling in `zip_name_locate()`.
* Add option to `zipcmp` to output summary of changes.
* Various bug fixes and documentation improvements.
Changes are mostly incremental, but some do break API compatibility:
* different behaviour of the De module
* the Higher returns a result value instead of raising an exception
v0.2.1
[zopfli.png] Only print debug info to console output when -v/--verbose flag is used.
v0.2.0
Dropped support for EOL Python 2.7 and 3.6, require Python 3.7+.
Added support for compressing PNGs via zopfli.png.optimize method. Also available from the command line as python -m zopfli.png; mimics the upstream's zopflipng c++ executable.
5.82.0
Fix cmake detection for tar+zstd
Implement KZstdFilter
5.83.0
Use better wording for open error
Use imported target for ZLib
5.85.0
Only pkg_check_modules() if PkgConfig is found
Add support for static builds
Use official gzip MIME/Media type application/gzip
Report KArchive_HAVE_ZSTD in CMake Config file to consumers
Deprecate remaining KFilterDev API in favour of KCompressionDevice
5.88.0
Add Android CI
This framework is now LGPL-2.0-or-later
5.89.0
K7Zip: use functions instead of macros
5.90.0
Fix printf conversion specifiers
Main changes:
-Allow changing of the view icon size and remember it.
-Allow sorting by any column (but only sort by the first column at startup).
-Forget the password (if any) on reloading the archive.
* Noteworthy changes in release 1.12 (2022-04-07) [stable]
** Changes in behavior
'gzip -l' no longer misreports file lengths 4 GiB and larger.
Previously, 'gzip -l' output the 32-bit value stored in the gzip
header even though that is the uncompressed length modulo 2**32.
Now, 'gzip -l' calculates the uncompressed length by decompressing
the data and counting the resulting bytes. Although this can take
much more time, nowadays the correctness pros seem to outweigh the
performance cons.
'zless' is no longer installed on platforms lacking 'less'.
** Bug fixes
zgrep applied to a crafted file name with two or more newlines
can no longer overwrite an arbitrary, attacker-selected file.
[bug introduced in gzip-1.3.10]
zgrep now names input file on error instead of mislabeling it as
"(standard input)", if grep supports the GNU -H and --label options.
'zdiff -C 5' no longer misbehaves by treating '5' as a file name.
[bug present since the beginning]
Configure-time options like --program-prefix now work.
* Noteworthy changes in release 1.11 (2021-09-03) [stable]
** Performance improvements
IBM Z platforms now support hardware-accelerated deflation.
1.0.3 (2022-03-28)
* *Fix* a number of memory leaks by freeing allocated liblzma data structures
(Issue Quintus#20 reported by xTRiM, PR win93#7 by Alex Gittemeier)