starred/brotli
1
0
Fork 0
mirror of https://github.com/google/brotli.git synced 2026-07-08 17:56:58 +00:00
Code Issues 1.2k Packages Projects Releases 20 Wiki Activity

Discrepancy between v1.0.8 git and v1.0.8 tarball #338

New Issue
Closed
opened 2026-01-29 20:42:13 +00:00 by claunia · 2 comments
claunia commented 2026-01-29 20:42:13 +00:00
Owner
Copy Link

Originally created by @jengelh on GitHub (Aug 27, 2020).

diff -dpru brotli-1.0.8/README.md brotli/README.md
--- brotli-1.0.8/README.md      2020-08-26 17:13:31.000000000 +0200
+++ brotli/README.md    2020-08-27 16:07:10.742994985 +0200
@@ -1,5 +1,11 @@
 <p align="center"><img src="https://brotli.org/brotli.svg" alt="Brotli" width="64"></p>
 
+# SECURITY NOTE
+
+Please consider updating brotli to version 1.0.8 (latest).
+
+Version 1.0.8 contains a fix to "integer overflow" problem. This happens when "one-shot" decoding API is used (or input chunk for strea>
+
 ### Introduction
 
 Brotli is a generic-purpose lossless compression algorithm that compresses data

It would appear that the v1.0.8 tarball references code from d052918 rather than db361a0.

Don't ever replace tags. github apparently does not support it - and git clients also do not force update tags.

Originally created by @jengelh on GitHub (Aug 27, 2020). ``` diff -dpru brotli-1.0.8/README.md brotli/README.md --- brotli-1.0.8/README.md 2020-08-26 17:13:31.000000000 +0200 +++ brotli/README.md 2020-08-27 16:07:10.742994985 +0200 @@ -1,5 +1,11 @@ <p align="center"><img src="https://brotli.org/brotli.svg" alt="Brotli" width="64"></p> +# SECURITY NOTE + +Please consider updating brotli to version 1.0.8 (latest). + +Version 1.0.8 contains a fix to "integer overflow" problem. This happens when "one-shot" decoding API is used (or input chunk for strea> + ### Introduction Brotli is a generic-purpose lossless compression algorithm that compresses data ``` It would appear that the v1.0.8 tarball references code from d052918 rather than db361a0. Don't ever replace tags. github apparently does not support it - and git clients also do not force update tags.
claunia commented 2026-01-29 20:42:14 +00:00
Author
Owner
Copy Link

@eustas commented on GitHub (Aug 27, 2020):

Re-released as 1.0.9

@eustas commented on GitHub (Aug 27, 2020): Re-released as 1.0.9
claunia commented 2026-01-29 20:42:14 +00:00
Author
Owner
Copy Link

@eustas commented on GitHub (Aug 27, 2020):

Thanks for the heads-up

@eustas commented on GitHub (Aug 27, 2020): Thanks for the heads-up
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
enhancement
feature
help wanted
pull-request
Mirrored from GitHub Pull Request
 release-v1.1
release-v1.1.1
release-v1.2
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
claunia
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/brotli#338
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?