libmspack-devel-0.6-lp152.6.3.1 4>$  ApaE/=„v5[dyG>&!UPL _|.sJ9CdY# xӣaFꃓ|tFLUind=,BSm"t"a0#hz4Y|E rI#%\HV[-C RVmcwPOSS9/)6'5<|Eq 8!1Һx'XI}ANL(bA?A&}\,Z Yf&tb.O$15e926d649e21b7cf54771935b7bb9accb019a5c565b5e5ea705b46768886df69a46e6bc54377ec36994bbe86eefc92303f9dd00YȉaE/=„slK?.zDJ`?}}p ̯|s}ۊ~a]*醐^=ݭmm}[@]A],3a^\iϲWtp!/#>7۽XWX9HU\sd,A܅fF`~mA=VF :ѮJ]K6XF/wA7se̝`}]lJj_cOۺ@R\]dS>ncx\8"R^>p>?d " a  .Nv|    + @L[jr(8 9 : FGHIXY \L]X^{bcTdefluvw<xHyTz\lpvClibmspack-devel0.6lp152.6.3.1Static libraries, header files and documentation for libmspackThe libmspack-devel package contains the header files and static libraries necessary for developing programs using libmspack.a=lamb10\openSUSE Leap 15.2openSUSELGPL-2.1http://bugs.opensuse.orgDevelopment/Libraries/C and C++http://www.cabextract.org.uk/libmspack/linuxx86_64[ށaKristyna Streitova Marketa Calabkova Marketa Calabkova adam.majer@suse.dejengelh@inai.demardnh@gmx.demardnh@gmx.desbrabec@suse.czp.drouand@gmail.comsbrabec@suse.cz- There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (CVE-2018-14679, bsc#1103032) * libmspack-CVE-2018-14679.patch - Bad KWAJ file header extensions could cause a one or two byte overwrite (CVE-2018-14681, bsc#1103032). * libmspack-CVE-2018-14681.patch - There is an off-by-one error in the TOLOWER() macro for CHM decompression (CVE-2018-14682, bsc#1103032). * libmspack-CVE-2018-14682.patch- add libmspack-0.6alpha-CVE-2019-1010305.patch to fix a buffer overflow in chmd_read_headers(): a CHM file name beginning "::" but shorter than 33 bytes will lead to reading past the freshly-allocated name buffer - checks for specific control filenames didn't take length into account [bsc#1141680] [CVE-2019-1010305]- Enable build-time tests (bsc#1130489) * Added patch libmspack-failing-tests.patch- Added patches: * libmspack-resize-buffer.patch -- CAB block input buffer is one byte too small for maximal Quantum block. * libmspack-fix-bounds-checking.patch -- Fix off-by-one bounds check on CHM PMGI/PMGL chunk numbers and reject empty filenames. * libmspack-reject-blank-filenames.patch -- Avoid returning CHM file entries that are "blank" because they have embedded null bytes. * (the last two patches were modified by removing unneeded part in order to make them more independent) - Fixed bugs: * CVE-2018-18584 (bsc#1113038) * CVE-2018-18585 (bsc#1113039)- Correct mspack-tools group to Productivity/File utilities- Correct SRPM group.- Fix typo- Update to version 0.6 * read_spaninfo(): a CHM file can have no ResetTable and have a negative length in SpanInfo, which then feeds a negative output length to lzxd_init(), which then sets frame_size to a value of your choosing, the lower 32 bits of output length, larger than LZX_FRAME_SIZE. If the first LZX block is uncompressed, this writes data beyond the end of the window. This issue was raised by ClamAV as CVE-2017-6419. * lzxd_init(), lzxd_set_output_length(), mszipd_init(): due to the issue mentioned above, these functions now reject negative lengths * cabd_read_string(): add missing error check on result of read(). If an mspack_system implementation returns an error, it's interpreted as a huge positive integer, which leads to reading past the end of the stack-based buffer. This issue was raised by ClamAV as CVE-2017-11423 - Add subpackage for helper tools - Run spec-cleaner- Remove problematic libmspack-qtmd_decompress-loop.patch (bnc#912214#c10). Version 0.5 has a correct fix dated 2015-01-05.- Update to version 0.5 * Please read the changelog; too many things to list- Fix possible infinite loop caused DoS (bnc912214, CVE-2014-9556, libmspack-qtmd_decompress-loop.patch).lamb10 16294543970.6-lp152.6.3.10.6-lp152.6.3.10.6alphamspack.hlibmspack.solibmspack.pc/usr/include//usr/lib64//usr/lib64/pkgconfig/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16844/openSUSE_Leap_15.2_Update/a484bd006f4ff339c7734d5e8d4b3c5a-libmspack.openSUSE_Leap_15.2_Updatecpioxz5x86_64-suse-linuxLaTeX document, ASCII textpkgconfig filePR'P,B,xJutf-8398aea1866628977ec6603f2e0b4ff53afe14bd3c15a3e701c707178170350db? 7zXZ !t/^B] crv(vX0&iL^'XuF1`e cxP"T Ϳ] JBrL `UxeH5HV-˛b2uTfAny463f LJw+F"19sc$?$lt d3ӂ;NF~=^ 4:`rȚ߮ μ7ftO.T g D,' UZI_lER*[`qPIi6̌kD>*>,.;{S-rN59RERHZD>T8'X 3`*9;5,euLe3ƻ&US͜vp41 NH>+n!s]ȤO#T͗XЖSyrdkqMMEL+l0sR ~x_dNQB7PN |/ KL$r+k[1I<۹ N2nRJV$dRoq!8."W@SY3:xNW:kxK;vDtIՇh}N(8~^.[8\10&@xY{ GDמb5`S ;j7q yzXb4 4(TҬ2Os>xX@^ ~ y%=O<И/P2igb\Ncl0:Zxy@3M0K=A*ޟ"44>BzڏeK ie&4ݏ{q8$q~c^%L7_>DƓM9̝B"qyj߇ N/SVU]oϝ:T\5⾨e,ÕyhAH>l~ 9V gvh [ceVbP*% ?8-]@?iK-Y>1~BwzxD$5іbh'l1BEªtf'c?9g~xESDU ڤN{Š-D+w44|6kM߹:tWZ:ꅄZZ¯m9pO,-@Ц R{ٚL.,G#RlgHP^0ӧpZunN&<!0jC"VϑGMwW)n@+fUvmEaaA.h-B>B1XDb.l8[$ (inc8e/̬,[boV<&iˎϢxu] L 0afv6kWGGcbUOذ8M̀MRyg;kHE42l'H}o)E | BaI+Ts۶3'"ɮ g(7Ǽo4XOn-)q؞C=\ ϋ?Kl'VsUe0]kO# ӆPSnD͍wešq5#~l.+cb4:M76XS Ts|ubƭӆZT%Qj`L:wlB(2n6XtŖTeҲ'PO;llhD[й^@\imDԚzAOv[Q)SFI|ӎaXM8)qgS`UtЮT,WwOsydoӉH:waޛm0cLE7nQ+v4ico|'eWJ\VzE5Nkm0CsŠE8"?qll+2qCrKQd0mRNbS DŽy5'aLo:dDm2LDlt`t,3C_h+KZFS--׳NQ_IʦCh cvLC,y@~KD2actQIͦŀ?`G[^v"KnvQAD@uڢK~navvSO8̦q~q, pun@3j&Qf P`+Fy!ݱ/'cc4FX%a'"[8MC<'Zte Yֿ > –,lv"pGIH}A:9z+i{⌥5l 5]]V"֖:刂'Ly!d׭bmg2lޣ hLeg:ꐊۼ@(256<!$\}Ǖk4aŹ>_Pr}i_TEuDjtv =-Q-t>CO6,Z]]y«u4mE't RD"S&EsTGάl; FZ>]dJXaQfy!Ԕ!Is>H|pL6 Pt5ҍ :^e]zL4tP!ZN/OW CA_%LI:$h ]H}q>T|4Ʌ؂\Lb?.dinl"+^DP{O3:(6ՓV ʾCuLΟϐ9$Tܗg M{.2 IP/EuħU2ʕT7ܙbK,kD\zEJbk-a+k 3bkE3k1OJm^0.Oګt^kbߺQ"?@Dҥ^   #mcn+ŁvgNYt6$%-q<+Ȕ-nCg UcKxyc- Q "<i? t.6Iaw'>C_ ?ծKzi zZGxC=q-^qK5_7mjUw( >( )c=󳊴r\ q?FUө\j~a᷀MK7S ~W`[n|[vӇLB/'k(Z(>TX@Ocذaв]KٴM4kw;hT4s2[ (󂮆,29PF!\r: _\,C_}/15KfnvCxuMai!L.(}V08|C؂$M,V_I_@( E5&}po#D{/?Y8=!t`H9ĭ3P_Y]ǘ8k螽 fj,H (ώ\BYD&) Yo^ ^ȋ0ǣ?{‘k`ɍ;0?BWe{o8:;QЍH h5*u+u58Sz2 ?xjyhU*CR} 0|PIov98M%QT5")B]ͮvգ)"5Kм:X`:'mɛ(k|x$KM59(VOF'YD:U d\?zj(bX%6cz1ešONUbwqш< 6{K!ߺ%OLNMXBPRJ4O+NpP#W a'Nt?6 $VYxABo!uh6ˑ`%P9yq HǕ~FBJηP{l-b~aD^q>LW۱rJ S;d۝,^%61 :;DqJ S++mm*@w} ~7WFݞɰJ;9F RHV$vO cgϦ+gu71IH )ՉzbIWϖ)L+h%䇩Nb~][}Gȁ/ T;ӧڷHq+3,Dq-n"ٍf;m{Mf-9 xǒ#Jw`&HFV}Xk ,9eW2x)փܢk~?"XWw zտKpjD/(hjPTKw1 p`9#9nDiҼw ZHo-%G_{ՇUaZ^~Re+-PSE@zӡi:rϨoeU^h"b<"2N1 -NKM3R.Mqyp-$^$CP|O!/cHt#1!k)n+XP$]rFSňN6wnCk()oOp^hfY@FIo' ]s+ƹhJONwDLP y4'(!J5!R墈\* HY` nƳpJpK.l$fj$E$̶,4M2@w9p&hwxb$uɄWj˛nͷ-PVIMGOK$;CߩkkJooI/T껢wHQn_BΟVH?yUNw ?doWji VG3eo  f ],?3 P*V& `HNJ }+{C*Z,8qbkGVߝ#IAlxi$dԤ8J2+yf^/7Gesw%ȶvI7La FQMIfy*$_CJ M\٬ƚ=  %]y%mzO瑴Ҥ%j(aHuZF?Rc:e >!pj2 yi%3O9$k? ) ce!v>vuB1 3H8h>T͖i\%3 `S6d0ܠtAW5[CбW`CgH$%#N#=8`Wp=|wQxG6Ɨc ~2x! OcemXkʯ/-ehHŹGgFje~[A]헾oi|̈=QݨQC)K#i8BM+h!H.S.5iRx)jQ"%='l*O1g畯XvAd6AYh"6^pC]SG_*h4jؿI[NM~g,2ƃ(ӛƎ VL⧎s䳃=Udơmս]dX@?GO>y+(֬uL1 kwWA}"ה4%ZSXJJzlK7t3,XgA;.W:[;] mkn:P80%:{d`qE/mh'շ~Ќ8JHO|qנW_^'XN^Еã$ХY+giE@CҢaɻn5xY4!쮘'tl.णY+_XJi>L,6PQ LN^T|jI 4BxT uOcQN LLrߩM7 ψ_0q76Ge RYU+/˞OGA8`2 QyOX,>Du3rє*Ի95dpMӚ;j?ɇH`![]uܲV("kVImjX2C? JŸ[N¿ 8%-F5pTA/#qeҮu|Q[D +`P*PDGG`KHDl,MA`7IL%՜]Eb{p\]^S +~Bdre9݁ۧ$9+~Cna`a Ii ҢդwI1Uztӗk&/Drr>U7CRWZMh8ax$IDUa#fv g8Ra9?Y.qS}GMp5XpfB-)cSXᴸ + &˖d¤{>kL&Pa )M C,^zR.J> LZ!6}lz+3f*uX%BNZ͛ m/xVp.N;2u]b &ZVmpX>iEޡJ,k֑v{3aORgk.OH%eu .ћ1'<: Q yڠ8F'UIAo|sJ%AwP|5KΏ; A^Sk*%}C _$FV.y 7/Uf:".͌>vК-i;'{>\`vL %} d&zP'oO"ݼ]k0R/=SY'D? sKϕ7-חź-(j$nhiV-uMj-Yߩ=c_Aq_+$x0_ƠZš }&,y4 SlH36A 8[CLۗi{FcnQgKPݹb"=iGj'L}K%4kt$ؽ6 6 !D)Mʸ^i/uD_4Rn8 >;3bH`F\--\#8&|8˒[pqқi]&F2WyCM'W ]S/e[>^y{iL3\`}8)vy*"[U< VF(Nc`Q}l 2LXiuEv~)v뭜Fe0̃^gD5_sj{iq ^5(Y&,G}Tx{LҴ 2+*(_$GgOݖKsUY- EʵvPޔrp~h|nt/6r$e3c 1g$[5w{92nYW/©F]ZjL &hb³,nVooUyՂ$0K`1EyL Ɔ66Z5;g[11Qb\EPǺ (9D ^.X(h= vTsFnӋ " [:jl)~9 Lf smUl3iF5m$69d85w% [+[ý5@'I]K<4[Hܮ4=(\Ǽs6z]lMsA|ƛFQw-R%ڑ,F-C{CX"2b]eDU_FyD:,Ŷזb=4UʒB 8 Iм,Xh̦DPGI`^=6F|3տ2 f 8hjG0nlȧtb45YZJ,.Q[wVropcgxQ[ʠK;dvP1n@l#h䋸S,ց }+е ]wb'ikJ g#;T]ob߃Ҁ{W* JI[4]$TrIae^e("*gTU=U 1g/Z["`MODl"Pw9").S_b]|op Em ;є}71q3QD'amz-?tTĂ.:#!# {zy^SקiFH kdacz8`MC'6YCŇڼDRC6}LNjE}]ֺl[;48gNtEH-#, 5,W+<1Ԗ;pyaL:ܩkJI™q=BAΟ zbZM9sGzH0#øTj|!; [v!zဠħ~D|p3~)bN2QyjtG]+srV "fT0+1:5Kf? &~7ck[nJi5몸nYN&5 j(h0;obP׮YWv$w {\o׵VD&)z@ݗq68.;传ܣfkЀd j#lvX`l@B6>@xn :8%(?_sl4tXQB 6HoC~'g!f&>IH]4[qJBՉ[+=nQRFJz89Mvo9Yb9$[JD0Wܔ+4`$!FnW0[Dk[XJ[d\ O \. ix^.ⒼU SÚAݻwO5c bʇI@z%Z<@f\xf7.abcL?U{uj,B%h"8*3ɍ-Rώ[=*C2Á~}' 5hςQЫ"i3G@ހvrېM5^Ҷ]b^ME;f;Uߖ[X#5@-]\!B 86*׾pPזim0a䌧2}D{&4][;o_4*hք>WMGuKGk6ƔaMәgF++UGfTȋӹ9z+0o^˂+W7˩>L2%A't]ok `Hw kУSB]:lI\ԐiDoZQ5QfҖZ 8r Cet{Q- ~O'76T ev/@EJP0B@dUB+BcpA6QDpQ"uwHN%2IAP7oW[L11{Dp)jW ̽٤/}N O=i$uܷ-҉OX"3႟RcM{1d1᠑@@JgWx -V?L-Qy >cTDFa\G)rd7ڋӀ/Fh,}J vJ~0vSU=1 5鮫\SnQjC4*R|uj҃մBbVwP=p7Ahz~'L缫gڑI[?oZn2r@mOD _iPZ oϛsIh𑑚ׁg4NdRFb EP -^lz(6;7A=oTՇ^9@H'u N7~X?Q3O.n]@0OĤҕQӬG} {ϝQRFG qŸ af" xx9̔ҐfD`f"=/"zyDCЧ?K2PZܯSJ%%gΣǞVVjXB[ЇӼ/F;a߳NUii&,]i.(FrO|XеyUjePӭUU17!mÏzd1wz-m7w@viP|Lj]{g }ՐB\]؍b_@SYFޟPP#v]VW_F1 - wwڹ6*<rN mH nֵ7|J' %v%d%kՈ'QsSE!wL ?HGuV!;A$mDV/,+ Hl&=<\Tȴ]q̛w=!)neWhK5˧ņP oiA.G`TRpıyH8md:Mo 'WxsϷ*IOZ#JH!Kcn~5?[5?1,-ΡD◜K hs_'"}tt5SYf9ouSw񨔵;dl&URPn&jGm/Yr{c/o0;%8?Zbo)О! `e\N) G-< 51Xӄq?҄8 fς%zL}ó0͸O>0yڶZVܥp̏}A/?ApHVZDǭmSI3wn=`ɸaL1_5mk0n `Yy@K:)\zi` 3!>z(|B% :nyndG"u(fJNasʡe "X=(rɲ5f-9=So?)bYlߋ#CJ0VkëJ<LnZişH9d!n3lKi+w\Zǃ|$ iDR<~^ 9Z.e% OPv8Y1,YW7rReteKdA_NA+ޭO>B=myjb*KCnL6t70eiVyX51*`Zkwul:ix&Mn\b+|}'nzi #NU|xj[!<8XE\(Dp,Ou܆^/}Xfp"/;8.sxXbF !?fCL(Hk6] ag2$$./{qv5ȱ}xTi.M_9&= #63O]߮DX}bD[WH&YXX' gE~CjUѸb݈%=X\\3vR6 W 0㼏1z냖H3]66K bGُLv %N:Ma򪱑NxZ3}WnF,gyXrlkEs&aqH<ǨP+_-pVZ'|,d.:rKj{4/'{dGsJ5R ϔ*8KYu?^yMO? 㯤Y=m^;Zh\=I2H{TcOZ \N>w͡pB$^@F# w?Kn%-?ic_*ӱh,ɡ@_G7 Ge} cXH%<( D'Q%ge:բA>~ yrJuNk-SR9+$ZQIְ5iR箒mw ,ߣq?0^Pg܍KceUSZ'3H'5 Ca:tQ2!Gy|xTi|[kTULgj=?'2լ,rrnGW ?pNW >= u&&fЖ<GcwQ DsP)GN&/8gܢ0aJ0GhYo?oX=,6bnO}WqnYʤq Aoq77qiS~9Y*GfD,E;_{ eJ}iAuoό%:gJrIo(΄oYL3O!+?F_γPWc!*(1<%б&V1؍sJB/QWȌ[G l(\!$V$ Ct BOJr|P|j~JUg/h{䆯mN6eLht(]'- YTA:WwdX`+ܜ?*ZJɤazWbޚ&dB+)6&cfД܄P35L5g=̳f'!ZHsnйPdnόB%R'X:喣1'셫} 0C6Sov77L}#_dfv 1`a/ E/l{]W^RUU1e .1ipZ7_zXWfS~,yYLd#jtA J*M!p 8y &1M8}\֍XL`s)"@5"O[ N4e5eԞNWWZ> @ڢL]E LHVCci踱$:t}T̠1qyPMdL˯sy aiUEb&Iy }^92"ѧRP& ԵOEr% nI0S1蒐.5E*J_Jc^Bo<鄉mC?V].3ebmfC"3L>H_=plC}N#g5 y"xmAθGt q,c߁9g0vS fT~/}-S_{yu}K>r1X> ިb7}n<$:6mRMwh)ssYݶ xǑ{ /Ԓ?`J 9*,2?Z50EX}5P4x}uh"!|豔jɭLTlFO̚àI-C Bj_Ѐ5<*311%\;4:EEX.|Iqs+̥pfj8zœEBJS8Rw TQ&/0G Y@Tx= %悘3Z:U[K^ñ>ʚ3n$p@A5$ܺk]<6sNҿfoL Нq5 B2fot`41їC{X\~)н! YZ