libmspack-devel-0.6-lp152.6.3.1 4>$  ApaK/=„)S:TK;-`]Bm7^g֞}O=wF'Q%DcT T)IWq #XT Uwd gڑF:Fb'a{dmT`~<".jWz4G|f_:h>"6==:VAжM↟p@"oG;}Y q$nmTmIY"fcɷ:PmtI.}dJJ:6.^|ϡa YE8kcmf8bd50293363d1bb1c4f3775c09e084a8b0e709e266917bbe7434d83a9b229bfe6aa122ffd80827c78049ce6256d14cabb16a831YȉaK/=„heX'O,Wؙ@}oRJMN8fT.' [Ar tXo5 `bS V GhER]7HKD_6͝nll2DV,dW7YL);q$+& yUbp^>p>?d " a  .Nv|    + @L[jr(8 9 : FGHIXY \L]X^{bcedefluv wLxXydzl|Clibmspack-devel0.6lp152.6.3.1Static libraries, header files and documentation for libmspackThe libmspack-devel package contains the header files and static libraries necessary for developing programs using libmspack.aBbuild85\openSUSE Leap 15.2openSUSELGPL-2.1http://bugs.opensuse.orgDevelopment/Libraries/C and C++http://www.cabextract.org.uk/libmspack/linuxi586[܁aAaAaAcff93d08933124485f6c59621abd7d6d4e3e4180d01e29b28081d4cf0f80e6f9d46969630b9d55eac8f4af0e9003f3d32f16a77cc02c6a011ea5bb02050926a5libmspack.so.0.1.0rootrootrootrootrootrootlibmspack-0.6-lp152.6.3.1.src.rpmlibmspack-devellibmspack-devel(x86-32)pkgconfig(libmspack)@    /usr/bin/pkg-configlibmspack0rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)0.63.0.4-14.6.0-14.0-15.2-14.14.1`]\[ZaZ]@Z]@Z\T\@TD@TC@Danilo Spinella Kristyna Streitova Marketa Calabkova Marketa Calabkova adam.majer@suse.dejengelh@inai.demardnh@gmx.demardnh@gmx.desbrabec@suse.czp.drouand@gmail.comsbrabec@suse.cz- There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (CVE-2018-14679, bsc#1103032) * libmspack-CVE-2018-14679.patch - Bad KWAJ file header extensions could cause a one or two byte overwrite (CVE-2018-14681, bsc#1103032). * libmspack-CVE-2018-14681.patch - There is an off-by-one error in the TOLOWER() macro for CHM decompression (CVE-2018-14682, bsc#1103032). * libmspack-CVE-2018-14682.patch- add libmspack-0.6alpha-CVE-2019-1010305.patch to fix a buffer overflow in chmd_read_headers(): a CHM file name beginning "::" but shorter than 33 bytes will lead to reading past the freshly-allocated name buffer - checks for specific control filenames didn't take length into account [bsc#1141680] [CVE-2019-1010305]- Enable build-time tests (bsc#1130489) * Added patch libmspack-failing-tests.patch- Added patches: * libmspack-resize-buffer.patch -- CAB block input buffer is one byte too small for maximal Quantum block. * libmspack-fix-bounds-checking.patch -- Fix off-by-one bounds check on CHM PMGI/PMGL chunk numbers and reject empty filenames. * libmspack-reject-blank-filenames.patch -- Avoid returning CHM file entries that are "blank" because they have embedded null bytes. * (the last two patches were modified by removing unneeded part in order to make them more independent) - Fixed bugs: * CVE-2018-18584 (bsc#1113038) * CVE-2018-18585 (bsc#1113039)- Correct mspack-tools group to Productivity/File utilities- Correct SRPM group.- Fix typo- Update to version 0.6 * read_spaninfo(): a CHM file can have no ResetTable and have a negative length in SpanInfo, which then feeds a negative output length to lzxd_init(), which then sets frame_size to a value of your choosing, the lower 32 bits of output length, larger than LZX_FRAME_SIZE. If the first LZX block is uncompressed, this writes data beyond the end of the window. This issue was raised by ClamAV as CVE-2017-6419. * lzxd_init(), lzxd_set_output_length(), mszipd_init(): due to the issue mentioned above, these functions now reject negative lengths * cabd_read_string(): add missing error check on result of read(). If an mspack_system implementation returns an error, it's interpreted as a huge positive integer, which leads to reading past the end of the stack-based buffer. This issue was raised by ClamAV as CVE-2017-11423 - Add subpackage for helper tools - Run spec-cleaner- Remove problematic libmspack-qtmd_decompress-loop.patch (bnc#912214#c10). Version 0.5 has a correct fix dated 2015-01-05.- Update to version 0.5 * Please read the changelog; too many things to list- Fix possible infinite loop caused DoS (bnc912214, CVE-2014-9556, libmspack-qtmd_decompress-loop.patch).build85 16294544020.6-lp152.6.3.10.6-lp152.6.3.10.6alphamspack.hlibmspack.solibmspack.pc/usr/include//usr/lib//usr/lib/pkgconfig/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16844/openSUSE_Leap_15.2_Update/a484bd006f4ff339c7734d5e8d4b3c5a-libmspack.openSUSE_Leap_15.2_Updatecpioxz5i586-suse-linuxLaTeX document, ASCII textpkgconfig filePREbRTDK4؈-utf-8bf39556c2b34aa7550ea8b7f1dd611fdda989971056f53bcabc8fa0e130f67e4? 7zXZ !t/^B] crv(vX0&iLdj[J,DНNgNPum׭S]不b$ ҿYY2\ԤdD_>Lɺy 4Lw3NY ~Bg7ځEMn:S棑(!_{vzĸYğU}ՈV~g=l&KT:})Ô(_e%Jޏ b׀;s| g7'U=l#1E)*SsDu% ), wV>q1*BEwlUc EUҒxOpM߷8jַK'! .0iY^:VXΨnN! & duވtB\업,X~М,:0>Lq}U D l noW?qӷDQI+2`U0mQ4<ȣw˼iyqS",'962P.oKe0bԡ-s*2 w^ެhPԊTqB#WF,55m@^h*Au()P||3֙Qs8'+NKc8lUaܸY%ЕnsE|>f`[-#qqq2FVQ/0D" 0& `Wm$ckÚM,ܷg+h>K7.0d0G[ŊPzŝ`Cn5t)b/ wi@9JB q:&g}eo'g1ce)8/{onr:)whHDKgbٝg\GlտCg0&Wz%6)ln`'2(ۑH3k!jS,]ѳ|+uϻkq2ޤ*c h:a~H1 cx&,üA\-@Cv܎>hR8ڧ,[v-H/ceGW(@dH{LAB3qlzR$6׉6nh/)g9UJ9/% ZSNbx2;^(>n_s׆CtX>s>&׎6ˈMp7W=4JJlT,%ؑYm!U}#xn />!J3O E"=A{c*;[ ,T,=|:;>/\{|Eݐ,K\Yq#3]󎔹@PSfYjTYClkt a_LNފZ{?a#DLAwp[wMg';Lzemcu8%T-n( tn Mj6sǺ";PFNjgZdqHTG4G6CJɢEM1Cky? J\1?m' X)^^E nƮg vbH2kΚ"<F`~9ͦ5طX})jth@VZl]~Fןq@7n״;UM';2SW˫tv#t/jw 'OZ=XjJ=覑!iDiwBl=M¶0mHƧ.ÄnFlKF[`%fӵt&dYjp@yb8%-}7vY DQ}2&lu42%(@"A4?"Q6 4>_7EX28z0^q -Z Jn}t\ RBqY`:v'EJDb-2WI s8.9b̭z@HKERp9"RuBv_!$1D}JDeq[r;h%G%tglP~;jG]Y\pdeCSK.w:t2[l|s &!x~r͘0@mBKlzւ35fȱ kſ4N@R9W-<XW: . kV%M(| iqTyPJ[vn~ķQ)hR,Ur=aD]XUb)k2Z]hQ6 mbA"Qn+"/lY˦hBpnlshK܈=Y!TG`"]Ƚdj}jeJJIS3@!cάD JE\"AHګ׌'ȮKt"%$f^W5"{yp%`[7xT\-+mqrzcg;`Qn ]K]y\.b=-&x* u7G)_#򷘺7bd6eJ0Mت:.)#F8Md'.$\;'j[' .gc\A| %n}j4VB Hvvm :?8WNsm{oK}P\xdI#+'A,-5E/J9h'sW;-ew34>e%e3Q0xJ*|AX4TX<~@pmrA;MTUUn*W`*#)F}~ f C̚Y%0PsQǞ6wz{yWmhRp?vmWD[\5r1xnШ5ľ6n#yINfefհAmrY$&$O]_P?r`O-Un)H__U*/WCnnb0ofH]򭡲J{y@Wʇ[ȼc̵C/Jg0HЦ3GXY[=SSjT„ZTt#0FxNVϢS\FI d UI$=l7mߓʰ-73[ԗ}jˣ! {cMJ$jngNP1?zDw..fynդh8``o TN, ;wbYDDA PG*Ct΁,:|SII8,H1{8 F[KjVap&딞ԂP߇v:N͔/ƿ]A@ |a6W!sDm^z B'WP%Ó+HX|}tky%}x+j\43swѴ7jn,*=wG̘JNLz"5j^VV>|pV=AKhHĨrݐv]:?(vKe\vKyސ \]~03ctpЃ\4 {{Ii|'n) mk7KFrډH,/&Hc&`m h\D\V?=z0G߉,a .'d̲%śM)tI6hXl%mI&Ж +aj\O ߴXuu5:GvAb+%R ^?̺6l8iQ-j"D4xcCXr1-ZgCO@,.D<rCt!SfpNe1?&gh uݾWk+v]9u%Λ x?+Ւ%*׶7Ap\C qϵf+ (Ve`x<:.O&{MMs% G\ו[@t99s=ʽ8^ǩ( xg\b-u6Y8RU"ƨ;ډJK j?h#uoCVog36IjH 9 5`F'R7e~ӚGTd⣣2ю GȱBL/   Ek!ץw=;ԝBN8:=Jxy^c.~ffbduZD#;#3Mi` ;tnBzՏC.jQ,v[.0Q(/cdS9KK$M!phʞ#EyF;E+Tpҏ fQIf! މy;stoc,c O3d2x%HjSΌe8+Qaea_o O-Sé͒P[Tc=s3Vq)D;$4S$w/bys!rI(G4JPs T,^ێ(S A $\R*? 6t_~/V=:S W 5 5eE qxTO4' =0) :jSBeLA}8wƋ>D(n'NZ'/vK%|l>y/')Foh U뷌|oGf[Y($apcn v$EL0R fe%FHږĿ00hKIIs4h i.1pPd5WvPx?*O&T nA^&e,d ^[(Kw)7&lrq!kb7|fc /YǮd_M'h|f>3^YP_Z)+(o.W;0ں)3x796UMpzzt݄~ s\e5l,cE!n3&no`E`J~/Ιjl fͅ9$Rʶ!2KPmfi [@]:T~ W [)?zN<ĠlC]59=Q"T^q4ϮI>p|\RfȄ(okNi=kM5gzBYВ9 ,~d5vF#S7˧LR*XhNq7XT[$ Y&o<^XWv ahJͰ}#pYēҏ̻r 5)3$S%4|zkՊNIɸb|\=5?yC|d(DFdb$ir)#LC S8FϞi2 G ^tϗL93 oY<`E1.lQb%b%ȧ#@"^v#(mm :]7.ܥsQJm_7Ym㞤<C%(/])҄tbѲn6)s"W3aW<~-kģg?YI8h)xOil!u?!6]JYirؔ G0RX!"۴/swZw35(VʳexcqkmS&F_*oͷc2C=~ jX5*}uAMzf֓ /ro9 ^[T3=M`C;>:+$Y]k|T A)ӽvQcƂYD:{dҗ=!E :|XŒ:$!3|PParci0w:z\'vUĝiB ?z:>',N2OƦ\E-k>WZW1-GRO 7flޘܨ;S ;BVڧ]`UA.a.˔U*avONLJ~<fŲ\AnkfBrȏ[)_B<(O汑<%_:PekVs[rd_LmOܛ9J!Ę"ژD|4<. *k28@tunMh5kpe=Y8Ornus GR5b[YؼuG,˱ ~HimUX3 Ly7MF(rvr5Sǃ:Fs4< DRVѶ9N c:1W6 9'kk"\ ?J[򊊘8fdL tw{ռ-]v;G)&@j`<᭕\zC7$јNFqɫglq7ɬK$}@-uf%SxƯ<[?qh]g*SDx˕O( f{ {G.)w>YODvS B˂Y!(OU1D%ˆa|X1 qx@ԟZ^hJ2IÄ a3D_I* 'E2|ʓ Co^T@Rпl\LA@tиn";?,4P/e|%~/q(`b IU\7T܁wE~lے2'lN} Ȃܔ0ww栒*"WsiO`25h(a *$z{dd%t'+ՙrng'S'%TGvd8OnI ]c+/C-N@Y6?ȋRꡥzóޠY^$UMSF'7|Foq4t*k2cF0KQJW ͝If ޏAj;YgaJKr NdyE5hF(Q5M;,}datoômP82NNOUW(B+GYZ}T$ ͻ _>]&\85@0R}2LasӄDaaD-臉o %l\o%fǫxlܔW*m, Rm+5qFŧE1&k;T:8[Ҩ?MXK:nMqn=6OE_xږ3jdpy$LEw)Pj}Sd7׭:=qvjx[u]|&X־7XG{^nCZy PozsqTSVh5֜c8Ѓ D:š5si3'6wr[:CރZ%waM f=!O[~E$WFuvg~Ǥ -ň2hٲ1Z\ +TNQJF ].y1TncyqS9 jݎey۲oJ2RgoafUZHvP>ܘċo+2OF}J׽g:'$OK$@.QU'-Fz`ܘi:SXϨDL!ԦTt3Wlr[Ɇ urPIbښ-9V=_D#f?dj`oع%ކ+[ˣΧK\6G2|}6-Ŭ{9\Bg=}ao`RNS]ۏOZK5aytnozP +H'9NF(0;rg!f-d2u.^=cdP}>x͢I͝e&0-iRRH-q/;mIj"mYߊ| :VD\۰5*U<< 5#e85r'8sA5p,u( BEy T? ;+h7d9l@Nzm:IZy/7E4XpiS4X9lI Bi8sX/i|dU~q*Go/ف 9ћ=#TEfC~r G=}#Nwog:@Dʍ':uKAq[).N=hԊFwDButN3OଣhljVoh;w<$l9_Y%$XggYgu772!A@OmߒT(\#ƥ*3Tgd-CEM"A5o]suŪE TA_S*TwaJ`rgC}| ON<&I uOT<mY4VpVfȓBJHג)@ሃ7ygp}-: Qf@xGx?21HuOFC Ip-x(ޤ~2Y#si^Y iv?P1c,j"N5<.돱. |Zga3p֒1% ٰtDkՏۧIp9HAme3g0I9O0~NMHҴyrY0J]V'2PDV1"nyawy`;k,2:\@jP@rȶle8\UdD6n/kt4(Cwf?zeV:Ш!rIy!)wpZ<{%kk$¨($p/fs1cE D̡ {"2axhJq#U0q,N+6FPۯTU^|m59ʽݻ7T:M%~G-.Y >XWN"9 FM-P7M.dc?mNӰ%86wy,y0tbs| Cp?te8ɚ]^mɶ;_ {k93C.w+kuW|!NC) ʌ A®Cf\YЂ"z $G2љ<۞7q3QUX ub*ϽlLlӿk[yBdCb8 |^h1=KB:SvNiw|O݂5o\!Ӛ>Ʊ1ے7,}{Q5gؘ<: )?d-ϏXw.F~z{F&qd"SrΨu:ȽW@5 }ٻX3@+Ij/eY:Օl߫j;]#]'ZE뎫q4laL5%U%nsJӢd(~4) rpGpvd1*)B8Ś`?B N]#(QlGG9l% ]H[_j cS*(2].{mZF@63rt9 uڋ3]r$`Sp1T8 FYg[VHy]׊sF EЍ*' RhiMDYth?#XQ/^(=yVQlx7뙑v,8/crR<_e5)bϫEuI)t[I'[ mT?'zy1Z9RZâ7h<dJ(|HLb"Xׇ[EBs> z9(3%4E=!%TEUB@;ڱM"(tA/ z.ȫ3MUrG5`>E;l؀JRfNYxt|Ug4uJ JWBvk?rVHBĨ(afaaÕ8c +uY찲Usd 4 E:`h24iBL~D?Џ=viNy{=zkd̴ XXd`-OOl&&*VwL$R[:W9$rk^v!V\MO)1bߧM(zI= ]+iBscm1~5Px:Fś5WN GG6IFe.?}5,RhR9f~,B ;Wm:xDf)aa[l`ޣ\F3SㅯxI[絫 $@$aƽ;;[+; FW%KbWm#ڄ$ n(e1/S/9EAkLw~oBbim6 D%W˴QYI퍟3zikg? lU (QoV&:R@`#/wEYe%1ISbuջ?ԝhqRqwt}1͖C.0L[_oVn{ HVzG˭ h{YJr+(yPv]!]gnLL~֧<8e>P G>X9V`&߷!k|Oں#N4ln(~ GPUu`vD_p@h3X=\2EnѽNG?dJ vFU3&H-/+{;.ɵRo` ǛQȳ6 υsa9X)m>@dzSyhO2U{DZl~]ˉTaIߚ {!1Yb:r?%DŽi4z>MQ@u.dO 3kժ<ʙǻT /-Zn{uoGIbg4t 2~ yIef1R~>Wِ QHl,[817+0DA?BȤl~Cƞ '0O6,vX}4uMG6!ޠ{I, 23*-Ӌ ى-GHUdD,Gz#(i>E0bx/fi(XV=DF-E C#V]DPsSgd< ^+qt395W޷n .G_i xсK|tw$k/VĒf}fO!mGqPs7 6թ|v!f;>ˬT+{x1Jq1~)&,U=JX r;tےikPx76%9ѵmn9Ed,]D-89r%tٯ Bh*[-a_NsdH >б+|GS婶Tʣ}dlj z÷,8^EtrvwDx%569w;vQJ|nB2N̈́K)f BTȶN vRVf 8"gOr!y!)LCFr:P`[(3O_"q T+ft&2 *51O<>!R^Np:'l'BV//Y@<Ҍte