head	1.1;
access;
symbols
	pkgsrc-2026Q3:1.1.0.2;
locks; strict;
comment	@# @;


1.1
date	2026.10.07.14.24.37;	author wiz;	state Exp;
branches
	1.1.2.1;
next	;
commitid	t2ASwL6pYmzLlyYG;

1.1.2.1
date	2026.10.07.14.24.37;	author maya;	state dead;
branches;
next	1.1.2.2;
commitid	YZ0MhWW5rnNLjh0H;

1.1.2.2
date	2026.10.21.00.36.20;	author maya;	state Exp;
branches;
next	;
commitid	YZ0MhWW5rnNLjh0H;


desc
@@


1.1
log
@libzip: update to 1.12.

# 1.12 [2026-10-07]

* Keep order of local extra fields, even if an identical extra field is present in the central directory.
* Add `zip_source_at_eof()` and `ZIP_SOURCE_AT_EOF`.
* Consistently report CRC and decryption errors when reading exactly to end-of-file.
* Remove Mbed TLS support - the required functions were made private.
* Make non-random tests work on macOS and Windows by using a special version of libzip.
* Securely clear passwords and key material before freeing it.
* Use SipHash hash function with per-table random keys. This prevents hash flooding attacks.
* Add compile time option to limit LZMA window size.
* Add more comprehensive fuzzers for metadata and write code paths.
* Fix `zip_source_is_seekable()`.
* Fix setting incorrect WinZIP AES version in some cases.
* Further improvements to overall stability and other minor adjustments have been made.
@
text
@$NetBSD: patch-regress_nihtest.conf.in,v 1.3 2023/08/25 07:12:41 adam Exp $

To allow testing in uninstalled state.

--- regress/support/nihtest.conf.in.orig	2023-08-23 10:55:23.000000000 +0000
+++ regress/support/nihtest.conf.in
@@@@ -9,6 +9,8 @@@@ program-directories = @@PROJECT_BINARY_DI
     @@PROJECT_BINARY_DIR@@/src/Debug
 default-program = ziptool_regress
 default-stderr-replace = "^([A-Z]:)?[^ :]*: " ""
+environment-passthrough = LD_LIBRARY_PATH
+    DYLD_LIBRARY_PATH
 
 [comparators]
 zip.zip = zipcmp -pv
@


1.1.2.1
log
@file patch-regress_support_nihtest.conf.in was added on branch pkgsrc-2026Q3 on 2026-10-21 00:36:20 +0000
@
text
@d1 15
@


1.1.2.2
log
@Pullup ticket #7291 - requested by taca
archivers/libzip: Security fix

Revisions pulled up:
- archivers/libzip/Makefile                                     1.86-1.87
- archivers/libzip/PLIST                                        1.23
- archivers/libzip/distinfo                                     1.52-1.53
- archivers/libzip/patches/patch-regress_nihtest.conf.in        deleted
- archivers/libzip/patches/patch-regress_support_nihtest.conf.in 1.1

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Wed Oct  7 14:24:37 UTC 2026

   Modified Files:
   	pkgsrc/archivers/libzip: Makefile PLIST distinfo
   Added Files:
   	pkgsrc/archivers/libzip/patches: patch-regress_support_nihtest.conf.in
   Removed Files:
   	pkgsrc/archivers/libzip/patches: patch-regress_nihtest.conf.in

   Log Message:
   libzip: update to 1.12.

   # 1.12 [2026-10-07]

   * Keep order of local extra fields, even if an identical extra field is present in the central directory.
   * Add `zip_source_at_eof()` and `ZIP_SOURCE_AT_EOF`.
   * Consistently report CRC and decryption errors when reading exactly to end-of-file.
   * Remove Mbed TLS support - the required functions were made private.
   * Make non-random tests work on macOS and Windows by using a special version of libzip.
   * Securely clear passwords and key material before freeing it.
   * Use SipHash hash function with per-table random keys. This prevents hash flooding attacks.
   * Add compile time option to limit LZMA window size.
   * Add more comprehensive fuzzers for metadata and write code paths.
   * Fix `zip_source_is_seekable()`.
   * Fix setting incorrect WinZIP AES version in some cases.
   * Further improvements to overall stability and other minor adjustments have been made.

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Wed Oct 14 10:59:01 UTC 2026

   Modified Files:
   	pkgsrc/archivers/libzip: Makefile distinfo

   Log Message:
   libzip: update to 1.12.1.

   # 1.12.1 [2026-10-14]

   * Protect against denial of service attack (advisory GHSA-m3wq-j48p-jxwh, actually fixed in 1.12).
   * Fix compile issues.
   * Fix adding and replacing files in torrentzip archives.
   * Fix error handling in `zip_source_filep_create()`.
@
text
@a0 15
$NetBSD: patch-regress_support_nihtest.conf.in,v 1.1 2026/10/07 14:24:37 wiz Exp $

To allow testing in uninstalled state.

--- regress/support/nihtest.conf.in.orig	2023-08-23 10:55:23.000000000 +0000
+++ regress/support/nihtest.conf.in
@@@@ -9,6 +9,8 @@@@ program-directories = @@PROJECT_BINARY_DI
     @@PROJECT_BINARY_DIR@@/src/Debug
 default-program = ziptool_regress
 default-stderr-replace = "^([A-Z]:)?[^ :]*: " ""
+environment-passthrough = LD_LIBRARY_PATH
+    DYLD_LIBRARY_PATH
 
 [comparators]
 zip.zip = zipcmp -pv
@