>From a quick look not sure how feasible this is to get into Bionic this late in the cycle?
Quick Summary of changes (https://libzip.org/news/): - There is a 1.3.2 build in Debian experimental, but hasnt progressed into unstable yet - A couple of CVE fixes (these should probably be cherry-picked regardless) - A bunch of bug fixes - A number of new features like bzip2, improved AES encryption support, some of the new features are other platforms only - Breaks API, soname bump, so will require a mini transition, all the 23-odd reverse-depends that I count are in universe though. Have not yet checked if any of these are affected by the API changes or can just be rebuilt. - they appear to have dropped their custom AES implementation in favour of using openssl (this should be a plus!) - Build system switched to Cmake in latest release -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to libzip in Ubuntu. https://bugs.launchpad.net/bugs/1674057 Title: [needs packaging] upgrade libzip to version 1.20 Status in libzip package in Ubuntu: In Progress Status in libzip source package in Bionic: In Progress Bug description: Please consider upgrading libzip to the newest version (currently 1.20). It comes with important changes (details here: https://nih.at/libzip/NEWS.html) and also it's used by ark since commit ee74c157daf3604277ffcf10d2a89b2b59556dd7: Add libzip plugin A new plugin for libzip was added. The plugin is only built if libzip 1.20 or higher is installed, but is the preferred plugin for zip archives. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libzip/+bug/1674057/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp