mspack-tools-0.6-3.8.19 4 > $
A p ^_!p9| (%l/fO[.|0A*";D/֒3 ȟ eә8}+*?@Nx>7%6NOEΎ'6{ ދf282 V 8鉍7.5_zdZ?3l&mYE_[C%+l"ԛs+) 8PΒLrXGm: 6H6Y&㇌>n+߁H9"d8dc3cfdad265ce1e2e8371958666319410a02f8 7d5eff1b296598a959c1fb62b1f67d9fea496c7f9da6c14dc81c6782a67dfb45 3ȉ ^_!p9|m +',9 ZJl3t!^fHLK-f5i+zָ]uyJ75@`兀%/|* ]-nwE:aNdB9BO2`${PĒ1?+2̺{||y^錪θ:Vt)A 䔬Ae`;C;N)YQv- `UfBp/#Sc1,ԏ]`08{"OHZfj %H > p > ? d S < @ T X q
$ 4 8
< L ` t ( 8
9 0
:
F G ( H 8 I H X L Y T \ l ] | ^ b c U d e f l u v w x y z T d h n C mspack-tools 0.6 3.8.19 Library That Implements Different Microsoft Compressions The purpose of libmspack is to provide both compression and
decompression of some loosely related file formats used by Microsoft.
Currently the most common formats are implemented.
This subpacke provides useful programs that make use of libmspack.
* cabrip - Extracts any CAB files embedded in another file.
* chmextract - Extracts all files in a CHM file to disk.
* msexpand - Expands an SZDD or KWAJ file.
* oabextract - Extracts an Exchange Offline Address Book (.LZX) file. ^^cibs-lx2160ardb-1 "SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1 https://www.suse.com/ Productivity/File utilities http://www.cabextract.org.uk/libmspack/ linux aarch64 ^^b^^b^^b^^b4f1de9ebfeb8b4e01e02dfd9a0142e9592e4f523051606671bb6024decc45812 c9fc6e610fc99b0fab60e4ee2fbf554b3d225fe319531e3252f22124aa9ac956 d60b8937fb61113da2f9a9254543d9d7bc34dc3238667cdfd03b0058db848011 d718820c47c1faab7523b6928e2f3bfa558fc1e2cfb9b27394ea88fcd50aa461 root root root root root root root root libmspack-0.6-3.8.19.src.rpm mspack-tools mspack-tools(aarch-64) @ @ @ @ @
ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libmspack.so.0()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 ]\[ZaZ]@Z]@Z\T\@TD@TC@kstreitova@suse.com mcalabkova@suse.com mcalabkova@suse.com adam.majer@suse.de jengelh@inai.de mardnh@gmx.de mardnh@gmx.de sbrabec@suse.cz p.drouand@gmail.com sbrabec@suse.cz - add libmspack-0.6alpha-CVE-2019-1010305.patch to fix a buffer
overflow in chmd_read_headers(): a CHM file name beginning "::"
but shorter than 33 bytes will lead to reading past the
freshly-allocated name buffer - checks for specific control
filenames didn't take length into account [bsc#1141680]
[CVE-2019-1010305] - Enable build-time tests (bsc#1130489)
* Added patch libmspack-failing-tests.patch - Added patches:
* libmspack-resize-buffer.patch -- CAB block input buffer is one
byte too small for maximal Quantum block.
* libmspack-fix-bounds-checking.patch -- Fix off-by-one bounds
check on CHM PMGI/PMGL chunk numbers and reject empty filenames.
* libmspack-reject-blank-filenames.patch -- Avoid returning CHM
file entries that are "blank" because they have embedded null
bytes.
* (the last two patches were modified by removing unneeded part
in order to make them more independent)
- Fixed bugs:
* CVE-2018-18584 (bsc#1113038)
* CVE-2018-18585 (bsc#1113039) - Correct mspack-tools group to Productivity/File utilities - Correct SRPM group. - Fix typo - Update to version 0.6
* read_spaninfo(): a CHM file can have no ResetTable and have a
negative length in SpanInfo, which then feeds a negative output
length to lzxd_init(), which then sets frame_size to a value of
your choosing, the lower 32 bits of output length, larger than
LZX_FRAME_SIZE. If the first LZX block is uncompressed, this
writes data beyond the end of the window.
This issue was raised by ClamAV as CVE-2017-6419.
* lzxd_init(), lzxd_set_output_length(), mszipd_init(): due to the
issue mentioned above, these functions now reject negative lengths
* cabd_read_string(): add missing error check on result of read().
If an mspack_system implementation returns an error, it's
interpreted as a huge positive integer, which leads to reading
past the end of the stack-based buffer.
This issue was raised by ClamAV as CVE-2017-11423
- Add subpackage for helper tools
- Run spec-cleaner - Remove problematic libmspack-qtmd_decompress-loop.patch
(bnc#912214#c10).
Version 0.5 has a correct fix dated 2015-01-05. - Update to version 0.5
* Please read the changelog; too many things to list - Fix possible infinite loop caused DoS (bnc912214, CVE-2014-9556,
libmspack-qtmd_decompress-loop.patch). ibs-lx2160ardb-1 1589468771 0.6-3.8.19 0.6-3.8.19 cabrip chmextract msexpand oabextract /usr/bin/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:10847/SUSE_SLE-15_Update/c0a58637f44abdaed874ce1c387b5083-libmspack.SUSE_SLE-15_Update cpio xz 5 aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-, BuildID[sha1]=47dd955d70160d213eaafe2754ac2fb0d6f25f51, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-, BuildID[sha1]=ff2608fe74cfea28333d3480f921379cc0ca800f, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-, BuildID[sha1]=bb93a8a65922db85242782aa7ef4d06a0fd6aa45, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-, BuildID[sha1]=da8e9c6171c77417241ab2f1a5e0f37dda8f6996, for GNU/Linux 3.7.0, stripped
R R R R R R R R R R R R R R R R qKJ䓐ʯq utf-8 5dd67d4f82ce70d02a65ae8e2171a66210a6cff5a03d57f84a3b9f3eef538734 ? 7zXZ
! t/%G]
crv9uP/ f~~OT~etH!.4rZ^x0{#йp2eqÈXX2u IKu!vEtKޟK Vy#=h-?l3k\}NųkB]B-} rvkX2g/ Q_j. o+ x 'n"v\#dE>3#{Gm$|ٗDfPU1ݎ`D"$4mlm3uo,"Ľ)U7+,dgiUUð-Te|TebCqA
T.}SG!e]sv۷{} 8 DDhԫEX_T-I} A=Ob CW|
YP?d)Qh=jL5-lQNdzD4$h.ԡ TԡxDu wqA!u0{b~$?
ҘDܣSBXnn{w _va7nqZjk*Gl\UN 5l SSnSXLK3b^A)ҍ-6W@89M=o' M*E:l2c
nzA-|HFЊeb)B焓$srSYH#ZA9
R b
oC.=E)@D
~Q/Vaڐ ]*遽4l䪏oX['[v#,ҷ}?mL
!hX;Sp(
W<T T~[nwmhG CFR &'v핑bw4 2@
'% -: ţ2Ik Oxw7j"%G , ;_r5Įn $4 ֫i~DU#..Q3#
zkɯÈ ;)cIbۿTEG
uDKt Sq>F.yM¹
ɷ "^*C.gsE&h1$D
x
t 5JդT`gipkXOws\G`qTDHX A]hc# (:.%XGIh:6ׇg %c0KeR9VB`m^bvX"/ f5yI
'c9NQs?2Z/2?/s !bEU-KP*@-%
f7vB +!|a_ƻKR;2 f^ƄvY
0]T;9簿ŇR/'} e/[A7yUh}Ge=B3阌{`:w
PK?\TN/OGS
Tgy
)i:\ZנuK%kH2|_ٌ|0_y3h8jhPxMAwC0iFpaG .;G5P610,+
țigt@/l[b>$7Ri٢+-k ~3;bl<%Y_tzP5˴"Yd
r6X܁R7+f6jM^UM\252J#0ិjS=jU8_ת` l@ "Y .XUdKJp(pQᲠbI.2|k|ο(.&쭇5F9.E)1[x%I.Z{N k ɛ14*NQ3:v`I6`#)Lj]cyc>t' I(- Z'V h9dp_jx-`.#f-0
9 >e2˽C";)
"wV5?BȏbĀ4l83Pĭ GI q̡7ΕaOޔdI* 6P§Tr#R&)4 Z$Nt:`+6:s'-[/5.P
i.8PG.p>?KuP*fn+n?=kS%_)~մ Qu!J3;*GDcDfW lW%-D⇒Gc'ǏC `̏ em8Gŭ,CSǛ9Ŗnbupxd z䤄`ӵȓҶ(cdPv Ind Ktf8n97;Z/, ÄG2|F8c'/2y`7OЊ66 .Oʠj@ /^E {0 m-J?h+ ,@܃M}@ظ^ Y5HOnA+9'$9 A^[l n-F<;wE暪wrm <}x
+y ~t#D1i{Ѝ* K- 3jjȪF#RBIFȅYu+
Qm3(FF $5YlL_n*~,
AZ SA)Ռޠ}=Kz2[^]U ]**O+n/ w)Bȑ=B^ aЏ٭+ XMvMSO"d[ [V?UB)V ^vᛂó$#2J`~ 08W g_OrXvS`2
G%.~6Aጌ 2ɢ9 t{S)IFKC]K- ^̮b ^\E ԙˉ2 5܈(c, V`L
]6tجԗpj mh{
PTJ?(L !/%Y܉]KW>RYeJYc҃iOGG jbfn֔$S G<,%dns5KʈHo)C+{w.^0C]k\
dF8 ɿ QAW%NdČw13,؍m0᳢Xma:rjDZ%T'H{;
)?}uڡ`%uء
\;$@JZ3PX'X+c ( J]zh . /Z74w4]hJ|}>X榵U^(`Jt*ĚCZ)ӎD+WxH5!28A%sqވRm '_)|I$;ԎPshUt]Mb9oXW?ZrxJ) U9U:@m5#6;33sD HWJ%LGR{G-~
n]!0ަmpWPz
v.[ "&ߤ_7W 9f-iϜd4V; XK٤9h\U)^:Gf=D y~r:'B 緹oiA۪geW!|Xc%pF 0jSjQgo >0R_O97Ţ"y @ c;5cw-Ӿ9K
E,G dϨ/Dl֕iX{߷J-| z36D{c: iyz(݁L|R,ӨOz dHi
f>|3|'tJ 5" VTrem>=F \CI0Gom)2tl1~_- SuTy
o~| N~3{|xNNX I7^|f+eCQ|2Ͽ`gfR'$$*zsiOnc^2; !#m?LÃ`H6r
6*QkM I< "u^g9VF%V_(;cӚ%6UR$o}Yj(epM^=vrH:(>9a
v~ "z"-__ßyb!Ex=-2nڞoؒѐG4RHF@q*3.Y@Z83".BHobQxHNS !HVsZ`IL+>X,v3=k Iɚ9 D/!xTI痻H~<{3~| $@䭗*GLe)$9 Lɬ}Jf|#T`n7l+ :-SHSei~Y 8 c(g .S
ph/ @j IӚݖd&~ȡĖ ł I=px4Ͻ5ad\>
kuEm$rDUnVl- m[Xik'Gߒ#,v~+yc+yELG
_4 Ln 1!ި53QOn٥Ђxr57|o2 !q8?H*`i W[et9,|\6>(wRSXG "oX;HqG:rz .
bVV"@~|[>M0(A~OJNstiԿz
V. 3 Wl
YZ