Module Name:	pkgsrc
Committed By:	salo
Date:		Sat Sep 23 14:47:46 UTC 2006

Modified Files:
	pkgsrc/archivers/cabextract [pkgsrc-2006Q2]: Makefile distinfo
Removed Files:
	pkgsrc/archivers/cabextract/patches [pkgsrc-2006Q2]: patch-aa patch-ab

Log Message:
Pullup ticket 1832 - requested by ben
security update for cabextract

Revisions pulled up:
- pkgsrc/archivers/cabextract/Makefile			1.17
- pkgsrc/archivers/cabextract/distinfo			1.9
- pkgsrc/archivers/cabextract/patches/patch-aa		removed
- pkgsrc/archivers/cabextract/patches/patch-ab		removed

   Module Name:		pkgsrc
   Committed By:	ben
   Date:		Sat Sep 23 13:02:17 UTC 2006

   Modified Files:
   	pkgsrc/archivers/cabextract: Makefile distinfo
   Removed Files:
   	pkgsrc/archivers/cabextract/patches: patch-aa patch-ab

   Log Message:
   Update cabextract to version 1.2.  Notable changes include:

   *  The "-t" archive integrity checking option has been added. This was
   requested by several users. cabextract can unpack cabinet files and give
   you MD5 checksums of the files inside, without writing the unpacked
   files to disk.

   * Large files (more than 2 gigabytes) are now correctly searched for
   cabinet files.

   * A security vulnerability has been fixed. Files compressed with the
   Quantum method, using a window size less than 32768 bytes, could cause
   cabextract to write beyond the end of the window and cause a
   segmentation fault. This fix also permits cabextract to unpack this type
   of cabinet file (of which only one has been found in the wild)
   correctly.

   * The unnecessary GNU source mempcpy.c, which caused compilation
   failures on several systems, was removed.

   * An off-by-one error introduced in 1.1's UTF-8 decoder was fixed. Files
   with UTF-8 filenames can now be extracted. The UTF-8 decoder was also
   upgraded to support the latest Unicode characer maps.


To generate a diff of this commit:
cvs rdiff -r1.16 -r1.16.4.1 pkgsrc/archivers/cabextract/Makefile
cvs rdiff -r1.8 -r1.8.12.1 pkgsrc/archivers/cabextract/distinfo
cvs rdiff -r1.5 -r0 pkgsrc/archivers/cabextract/patches/patch-aa
cvs rdiff -r1.1 -r0 pkgsrc/archivers/cabextract/patches/patch-ab

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.