[GitHub] [incubator-doris] acelyc111 edited a comment on issue #1559: thirdparty: bump bzip version to 1.0.8

[GitBox <gi...@apache.org>]

acelyc111 edited a comment on issue #1559: thirdparty: bump bzip version to 1.0.8
URL: https://github.com/apache/incubator-doris/pull/1559#issuecomment-515763623
 
 
   I submmit this PR just because I can't build thirdparties, seems bzip2 1.0.6 download url is outdated, and the latest released stable version is 1.0.8.
    
   release notes of 1.0.7 and 1.0.8:
   
   ```
   1.0.7 (27 Jun 19)
   ~~~~~~~~~~~~~~~~~
   
   * Fix undefined behavior in the macros SET_BH, CLEAR_BH, & ISSET_BH
   
   * bzip2: Fix return value when combining --test,-t and -q.
   
   * bzip2recover: Fix buffer overflow for large argv[0]
   
   * bzip2recover: Fix use after free issue with outFile (CVE-2016-3189)
   
   * Make sure nSelectors is not out of range (CVE-2019-12900)
   
   1.0.8 (13 Jul 19)
   ~~~~~~~~~~~~~~~~~
   
   * Accept as many selectors as the file format allows.
     This relaxes the fix for CVE-2019-12900 from 1.0.7
     so that bzip2 allows decompression of bz2 files that
     use (too) many selectors again.
   
   * Fix handling of large (> 4GB) files on Windows.
   
   * Cleanup of bzdiff and bzgrep scripts so they don't use
     any bash extensions and handle multiple archives correctly.
   
   * There is now a bz2-files testsuite at
     https://sourceware.org/git/bzip2-tests.git
   ```

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@doris.apache.org
For additional commands, e-mail: dev-help@doris.apache.org