From unknown Mon Aug 18 08:52:02 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#54772 <54772@debbugs.gnu.org> To: bug#54772 <54772@debbugs.gnu.org> Subject: Status: gzip-1.12 released [stable] Reply-To: bug#54772 <54772@debbugs.gnu.org> Date: Mon, 18 Aug 2025 15:52:02 +0000 retitle 54772 gzip-1.12 released [stable] reassign 54772 gzip submitter 54772 Jim Meyering severity 54772 normal tag 54772 notabug thanks From debbugs-submit-bounces@debbugs.gnu.org Thu Apr 07 13:12:53 2022 Received: (at submit) by debbugs.gnu.org; 7 Apr 2022 17:12:53 +0000 Received: from localhost ([127.0.0.1]:33270 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ncVgi-0007hY-TN for submit@debbugs.gnu.org; Thu, 07 Apr 2022 13:12:53 -0400 Received: from lists.gnu.org ([209.51.188.17]:42540) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ncVgh-0007hQ-14 for submit@debbugs.gnu.org; Thu, 07 Apr 2022 13:12:51 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:46222) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ncVgf-0005kZ-Fk; Thu, 07 Apr 2022 13:12:49 -0400 Received: from mail-pj1-x1029.google.com ([2607:f8b0:4864:20::1029]:41657) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1ncVgd-0004t4-Dw; Thu, 07 Apr 2022 13:12:49 -0400 Received: by mail-pj1-x1029.google.com with SMTP id e8-20020a17090a118800b001cb13402ea2so2411595pja.0; Thu, 07 Apr 2022 10:12:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=sender:from:to:cc:subject:mail-followup-to:date:message-id :mime-version; bh=kPObT0gUzK/TvBYkiZNd2p8ONp37Nzj6tmukVtxIDTI=; b=TpuTYWmUx0YWnX4Yusd5aMTwgmKpppWvM6NGvG99UhI5ZB2P3Hk15wQeT4u45osVEO R7MRisemFnZSbb/1goQZ0TY+XuozLjuO4/WsoU5uzW9LycQgTmy4jU4bJuw+G3dI1Y6H tYCd5Uxz5Xz/wexVboZOzFnqobL/yT0nR7ydrl6733LB21MQVBUuuAVAfKIKqzZf/mBI tmRZLGMT1ZjmbGVLLdObXHM9YEHogbj8yLVI0MgW8W3rARDUFcFEwe+hctUqFvCrcupf fWHLBYBmqQ4hHQC9MaWMmGxutqX4DamAuX3ok9fUXdf4oVItwsjsGaXNc+8ONPQ6nAU4 3aFQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:sender:from:to:cc:subject:mail-followup-to:date :message-id:mime-version; bh=kPObT0gUzK/TvBYkiZNd2p8ONp37Nzj6tmukVtxIDTI=; b=FIVHNr+ywCyE8pAELC/Kpwbk82eTFk1v2i470xH3Nj/Je0LyqGbdH6lUPGmE216le4 0tBa1t5ij4/HPmf+SdR9LiKT9r4hTDFjFBBgZfmMNF1Orltt/B3BLMfbgardePbyoGqZ LjQlEWjlpie4biIhlSp9hWoRPn/wLVnoy4Uvx1dpUgtwPqfyRjx5lXw2Ul3WLSl3MWY+ l0frEXtWpXiN0FIluH3P4OnPE6qKTAhLdriYRPGqgoMhgeUB3ICYuIFBjhJTx6ZDur/0 fGtDykh1niV8/A5Od72KVim1CKTGBzLvVw/tAKaeOeW6959+v3jE3NI9itrEUgH4vyZL VtVw== X-Gm-Message-State: AOAM531tPDiLMdsSIofG2jaLcX99rApymOeAdq1Blm1qpbRmDQQA5wo3 hSJ6lJVKm/aI2IRTDRU1+S3h7wuJ0IA= X-Google-Smtp-Source: ABdhPJySx51uuhSyUsDiD0jO4U+wFjE4NGOeWBSdRWMymeC0Od/mVxh1NQM772LluvtXUbCz0dpD5A== X-Received: by 2002:a17:903:248:b0:155:e660:b774 with SMTP id j8-20020a170903024800b00155e660b774mr15274541plh.174.1649351564270; Thu, 07 Apr 2022 10:12:44 -0700 (PDT) Received: from meyering-mbp ([2620:10d:c090:400::5:8dca]) by smtp.gmail.com with ESMTPSA id l10-20020a056a00140a00b004c55d0dcbd1sm23518086pfu.120.2022.04.07.10.12.42 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 07 Apr 2022 10:12:43 -0700 (PDT) From: Jim Meyering To: info-gnu@gnu.org Subject: gzip-1.12 released [stable] Mail-Followup-To: bug-gzip@gnu.org Date: Thu, 07 Apr 2022 10:12:17 -0700 Message-ID: MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Received-SPF: pass client-ip=2607:f8b0:4864:20::1029; envelope-from=meyering@gmail.com; helo=mail-pj1-x1029.google.com X-Spam_score_int: -14 X-Spam_score: -1.5 X-Spam_bar: - X-Spam_report: (-1.5 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.249, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.249, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: -0.8 (/) X-Debbugs-Envelope-To: submit Cc: bug-gzip@gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.8 (-) --=-=-= Content-Type: text/plain Thanks to Paul Eggert and Lasse Collin for all the work on fixing the exploitable zgrep bug, and to Paul for handling most of the other changes. Here are the compressed sources: https://ftp.gnu.org/gnu/gzip/gzip-1.12.tar.gz (1.3MB) https://ftp.gnu.org/gnu/gzip/gzip-1.12.tar.xz (808KB) Here are the GPG detached signatures[*]: https://ftp.gnu.org/gnu/gzip/gzip-1.12.tar.gz.sig https://ftp.gnu.org/gnu/gzip/gzip-1.12.tar.xz.sig Use a mirror for higher download bandwidth: https://www.gnu.org/order/ftp.html Here are the SHA1 and SHA256 checksums: 91fa501ada319c4dc8f796208440d45a3f48ed13 gzip-1.12.tar.gz W0+xTTgxTgny/IocUQ581UCj6g4+ubBCAEa4LDv0EIU gzip-1.12.tar.gz 318107297587818c8f1e1fbb55962f4b2897bc0b gzip-1.12.tar.xz zl4D5Rn2N+H4FAEazjXE+HszwLur7sNbr1+9NHnpGVY gzip-1.12.tar.xz The SHA256 checksum is base64 encoded, instead of the hexadecimal encoding that most checksum tools default to. [*] Use a .sig file to verify that the corresponding file (without the .sig suffix) is intact. First, be sure to download both the .sig file and the corresponding tarball. Then, run a command like this: gpg --verify gzip-1.12.tar.gz.sig If that command fails because you don't have the required public key, or that public key has expired, try the following commands to update or refresh it, and then rerun the 'gpg --verify' command. gpg --locate-external-key jim@meyering.net gpg --recv-keys 7FD9FCCB000BEEEE wget -q -O- 'https://savannah.gnu.org/project/release-gpgkeys.php?group=gzip&download=1' | gpg --import - This release was bootstrapped with the following tools: Autoconf 2.71 Automake 1.16d Gnulib v0.1-5194-g58c597d13b NEWS * Noteworthy changes in release 1.12 (2022-04-07) [stable] ** Changes in behavior 'gzip -l' no longer misreports file lengths 4 GiB and larger. Previously, 'gzip -l' output the 32-bit value stored in the gzip header even though that is the uncompressed length modulo 2**32. Now, 'gzip -l' calculates the uncompressed length by decompressing the data and counting the resulting bytes. Although this can take much more time, nowadays the correctness pros seem to outweigh the performance cons. 'zless' is no longer installed on platforms lacking 'less'. ** Bug fixes zgrep applied to a crafted file name with two or more newlines can no longer overwrite an arbitrary, attacker-selected file. [bug introduced in gzip-1.3.10] zgrep now names input file on error instead of mislabeling it as "(standard input)", if grep supports the GNU -H and --label options. 'zdiff -C 5' no longer misbehaves by treating '5' as a file name. [bug present since the beginning] Configure-time options like --program-prefix now work. Also posted here: https://savannah.gnu.org/forum/forum.php?forum_id=10157 --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEEFV0/xQDINEhtHupnf9n8ywAL7u4FAmJPG34RHGppbUBtZXll cmluZy5uZXQACgkQf9n8ywAL7u4KRBAAqR/93EbEkLg2ptogYSqV0NB84rmjTQld Wxl+hNkKNyMynFlNCeyW/JGvZFfnZi8v1nGUqFcc6Xm8BEL0vkT37//KJ1yPy505 Ebh0OZOpEFbDk3G7HWhbLC9HYsPc5fd81QBN+whXyllRFYb6SNBGnvfuYMUMnqrJ BOivNznGt9QIBj2wrU7GlF6wvbNw/Xyb2txU6T/Z4eVMrLrJISFhmDxPpAi/aNl7 ctD/OvKbc2unco1/ZA8IZ7ujP/0z/CVtow3lBa1e25cvLVvViTjknqOkN4/uIAUH LYdu6qeTlCmhSo0faI43owHxicF9AhEx4g21m4uOqX3V9ItntKg/pdxRi+Z1Vx+u aPWLRwSwY0AXxxdIJN7u6rLP7PKQX/HIy7wtCAbuSNx4v18opifRcUpi3Xb7Dh/V wvVLTR6ji9PKu7fp+PfV0YTDnXMZe3U0AMrkuetMYmONyvMoNonIiayvMw3y9tMh IgQg8vIodF8ntD2imaSkaJEEZCtNus0h8/WwtRzIKItIUQ/0EMTn7/tcYCy1moZa CvcTBnuj9bQNs0XGa3zi9RXcQkDeI95hZ7oLq0S+TEvpTN+3z01MKazu/GpsbwPA ud/HSd3TzJLP4zLkR3McpjRxOTDGWpO/JAtDXJ3Omu1mJkBYeoYYpQoDAHX9kpLf x7vf/tq6lNg= =pH1w -----END PGP SIGNATURE----- --=-=-=-- From debbugs-submit-bounces@debbugs.gnu.org Thu Apr 07 18:57:39 2022 Received: (at control) by debbugs.gnu.org; 7 Apr 2022 22:57:39 +0000 Received: from localhost ([127.0.0.1]:33600 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ncb4N-0000XD-53 for submit@debbugs.gnu.org; Thu, 07 Apr 2022 18:57:39 -0400 Received: from zimbra.cs.ucla.edu ([131.179.128.68]:49498) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ncb4M-0000Wy-3Q for control@debbugs.gnu.org; Thu, 07 Apr 2022 18:57:38 -0400 Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id B797016006C for ; Thu, 7 Apr 2022 15:57:32 -0700 (PDT) Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id GJ8x-jSjZISy for ; Thu, 7 Apr 2022 15:57:32 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id 28BFF16008E for ; Thu, 7 Apr 2022 15:57:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at zimbra.cs.ucla.edu Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id ka63oS41jQjl for ; Thu, 7 Apr 2022 15:57:32 -0700 (PDT) Received: from [131.179.64.200] (Penguin.CS.UCLA.EDU [131.179.64.200]) by zimbra.cs.ucla.edu (Postfix) with ESMTPSA id 05F9616006C for ; Thu, 7 Apr 2022 15:57:31 -0700 (PDT) Message-ID: <4bc7cafa-221f-9cbd-407a-ee6f27a2f210@cs.ucla.edu> Date: Thu, 7 Apr 2022 15:57:31 -0700 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.7.0 Content-Language: en-US To: GNU bug control From: Paul Eggert Subject: gzip bug report maintenance Organization: UCLA Computer Science Department Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) tags 54778 notabug tags 54772 notabug close 54778 close 54772 tags 54759 moreinfo From unknown Mon Aug 18 08:52:02 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Fri, 06 May 2022 11:24:08 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator