libmspack-devel-0.6-3.14.1 >
A app9|ܳ Wb heu*&4Yu?.ꪣ.i|Ρ*A잦n~ja&-*O,ωs\ 35 <yWFtQ3Ղm9 z[nݤϰQA⳰(tQݶZwQlK{ߎz!qf<˪Vbrs8eFQ>u(8mSBxP[ 9d H0VL!uhL6* 倡n46972ed92e614c55eb1561dcf49aabee35ac6510 f89dc139db0f224e6a59d1a8616ef6349f49796ffd1adb0bde28bd49386dccf2 Z app9| EP45 ? ލӾ*"z!DH3l1ST|Is# RQP?Xf *
G)ԯGtQe +QYVK@[2ݦX|V)d䈗Vŋ9ӿBDi!1]k}`юPҿ垼^}*[WMsɗAqFD,O ӵdm <4t&49ai|:6XI ^ > p > ? d \ * 3 I i
G
\ h w ( 8 9 : F R G h H t I X Y \ ] ^ b c d 4 e 9 f < l > u T v ` w x y z C libmspack-devel 0.6 3.14.1 Static libraries, header files and documentation for libmspack The libmspack-devel package contains the header files and static
libraries necessary for developing programs using libmspack. aOmourvedre \SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1 https://www.suse.com/ Development/Libraries/C and C++ http://www.cabextract.org.uk/libmspack/ linux ppc64le [ ށ aNaNaNcff93d08933124485f6c59621abd7d6d4e3e4180d01e29b28081d4cf0f80e6f9 3d7f3a5c7f2048aa98240a469d43a3071bc1db9c96a7657d38caf2318b154da0 libmspack.so.0.1.0 root root root root root root libmspack-0.6-3.14.1.src.rpm libmspack-devel libmspack-devel(ppc-64) pkgconfig(libmspack) @
/usr/bin/pkg-config libmspack0 rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 0.6 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 aՈ@`]\[ZaZ]@Z]@Z\T\@TD@TC@danilo.spinella@suse.com danilo.spinella@suse.com kstreitova@suse.com mcalabkova@suse.com mcalabkova@suse.com adam.majer@suse.de jengelh@inai.de mardnh@gmx.de mardnh@gmx.de sbrabec@suse.cz p.drouand@gmail.com sbrabec@suse.cz - chmextract.c add anti "../" and leading slash protection to chmextract
(CVE-2018-18586.patch, bsc#1113040)
* cve-2018-18586.patch - There is an off-by-one error in the CHM PMGI/PMGL chunk number validity
checks, which could lead to denial of service
(CVE-2018-14679, bsc#1103032)
* libmspack-CVE-2018-14679.patch
- Bad KWAJ file header extensions could cause a one or two byte overwrite
(CVE-2018-14681, bsc#1103032).
* libmspack-CVE-2018-14681.patch
- There is an off-by-one error in the TOLOWER() macro for CHM decompression
(CVE-2018-14682, bsc#1103032).
* libmspack-CVE-2018-14682.patch - add libmspack-0.6alpha-CVE-2019-1010305.patch to fix a buffer
overflow in chmd_read_headers(): a CHM file name beginning "::"
but shorter than 33 bytes will lead to reading past the
freshly-allocated name buffer - checks for specific control
filenames didn't take length into account [bsc#1141680]
[CVE-2019-1010305] - Enable build-time tests (bsc#1130489)
* Added patch libmspack-failing-tests.patch - Added patches:
* libmspack-resize-buffer.patch -- CAB block input buffer is one
byte too small for maximal Quantum block.
* libmspack-fix-bounds-checking.patch -- Fix off-by-one bounds
check on CHM PMGI/PMGL chunk numbers and reject empty filenames.
* libmspack-reject-blank-filenames.patch -- Avoid returning CHM
file entries that are "blank" because they have embedded null
bytes.
* (the last two patches were modified by removing unneeded part
in order to make them more independent)
- Fixed bugs:
* CVE-2018-18584 (bsc#1113038)
* CVE-2018-18585 (bsc#1113039) - Correct mspack-tools group to Productivity/File utilities - Correct SRPM group. - Fix typo - Update to version 0.6
* read_spaninfo(): a CHM file can have no ResetTable and have a
negative length in SpanInfo, which then feeds a negative output
length to lzxd_init(), which then sets frame_size to a value of
your choosing, the lower 32 bits of output length, larger than
LZX_FRAME_SIZE. If the first LZX block is uncompressed, this
writes data beyond the end of the window.
This issue was raised by ClamAV as CVE-2017-6419.
* lzxd_init(), lzxd_set_output_length(), mszipd_init(): due to the
issue mentioned above, these functions now reject negative lengths
* cabd_read_string(): add missing error check on result of read().
If an mspack_system implementation returns an error, it's
interpreted as a huge positive integer, which leads to reading
past the end of the stack-based buffer.
This issue was raised by ClamAV as CVE-2017-11423
- Add subpackage for helper tools
- Run spec-cleaner - Remove problematic libmspack-qtmd_decompress-loop.patch
(bnc#912214#c10).
Version 0.5 has a correct fix dated 2015-01-05. - Update to version 0.5
* Please read the changelog; too many things to list - Fix possible infinite loop caused DoS (bnc912214, CVE-2014-9556,
libmspack-qtmd_decompress-loop.patch). mourvedre 1641549647 0.6-3.14.1 0.6-3.14.1 0.6alpha mspack.h libmspack.so libmspack.pc /usr/include/ /usr/lib64/ /usr/lib64/pkgconfig/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:22325/SUSE_SLE-15_Update/6e0c48d65487ba03676ae772ed09c42b-libmspack.SUSE_SLE-15_Update cpio xz 5 ppc64le-suse-linux LaTeX document, ASCII text pkgconfig file P R bgޕ utf-8 c46a2d5c3e90f2f58cf4d416b9834915a230ba34aa729da1392b33f5c10e8006 ? 7zXZ
! t/^B]
crv(vX0EDV} K -P}ԳRai;qq$CBa`!<IEAiL yXj
Cn,֊VL"jKL,u ILfmulF2{Hҫ|3ӠC.wKVhYt$| =nBD"orV8HIo8g8Q kh^BeHGr0 V{xx;
cE/VK59ض*% y0v$\bқ]֬4?&I)Е ?̫+4)毦-S4J04Њ']\ 0`Z|@E'muֆGq% G?o،ҚءGxl.^ I$7eo "W5nmĘ}V4#bNd1(ﶎr%:zcCi-R+4 eJsN:]2(wA{sYa`˕[$Za! @.JJ䊛4RW ,J g -Xq5s=CoIԁ d
O09ȯ}
ù{k&u"_|eqd(_,lo\>뤚,H+;(6bE](hlєQt&zl E@sp=Yr⦮@6S lHjV qAUWY?<48%:(aS~3ͦU0m?xt;,HG옄ComcIwZu
>Bo~-QHżZs .7mUMЛi^M,klM;m ' (yYO&iJJfx)r 5[`wӂDĠ0 @zȀ 9?.nBbx5[HI 03ЦՀF1ݱKR\q.$ZBy Iu]"nߞ[hբJSoLk %cفpj :-"]0ŷj*d' qn\|6_ / XBwSk8VN%E%%hOtRWӡk9ZXץp}6T_ 7Z_d&]*6VӅ̯R!v>L +W7Ut|9 Kg
zQJ%TJQX)e_!y 8 AO/F1n= G1@ Wm!LV8ҝ2ySm>;g`@ s{6զX.l00JV 1
$WLLrխ^0u ?[ȭ@*2L
,ۖ'\/LYB