Bug 1632206 - xu4 - remove minizip-compat dependency
Summary: xu4 - remove minizip-compat dependency
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: xu4
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Jason Tibbitts
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 1632208
TreeView+ depends on / blocked
 
Reported: 2018-09-24 10:59 UTC by Patrik Novotný
Modified: 2018-09-25 07:55 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2018-09-24 16:39:22 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Patrik Novotný 2018-09-24 10:59:02 UTC
I intend to remove unmaintained minizip library (now packaged as minizip-compat) from the zlib package. Therefore, I'd need all dependent packages to either migrate to the new minizip[1] package or simply bundle the old one.

[1] https://github.com/nmoinvaz/minizip

Comment 1 Jason Tibbitts 2018-09-24 16:39:22 UTC
Seems the new minizip lacks the unztell() function so more than a rebuild is required.  I could conceivably do a port to the new minizip or to some other  library, but this would all be to avoid the use of a single unzip.c source file that's already part of the source.

So I've just reverted to using the bundled bit.  It's not called on untrusted data so it shouldn't be particularly problematic.

Comment 2 Pavel Raiskup 2018-09-25 07:55:12 UTC
Upstream report about unztell():
https://github.com/nmoinvaz/minizip/issues/319

Thanks for the fix!


Note You need to log in before you can comment on or make changes to this bug.