mspack-tools-debuginfo-0.6-lp152.6.3.1 4>$  ApaK/=„$FX ~\Oh'i﭅RJ;|g(C]2z=16Sq RT> T 2q(ɹR7pvY^HL>p@t?d ' R'09 Rd  8   Phdt(8 9( : ? FDGXHIX Y$\]8^> bcdcehfklmuvw xpyz`mspack-tools-debuginfo0.6lp152.6.3.1Debug information for package mspack-toolsThis package provides debug information for package mspack-tools. Debug information is useful when developing applications that use this package or when debugging this package.aBbuild85openSUSE Leap 15.2openSUSELGPL-2.1http://bugs.opensuse.orgDevelopment/Debughttp://www.cabextract.org.uk/libmspack/linuxi586FH!J!J;D@3.LAAAAAAAA큤aBaBaBaBaBaBaBaBaBaBaBaBaBaBaBaBaBaBaBaBc31b74190f0db908648cac4c4ecb5ba6fcabae32aafdc88a2c00d61c4cf87bbb98dec04b7dc247926403b778d83eabc5505f72d6c5d5c76156c6030963db3a194add7c3bd400262a0b9479bd035a9b780ada4f06317fd91f9cc043eca1f0b42fc7bbf731e62612df92b6d2eb9a868e8bb711ea197e15e24ce301dee4664feeda../../../../../usr/bin/cabrip../../../../../usr/lib/debug/usr/bin/cabrip-0.6-lp152.6.3.1.i386.debug../../../../../usr/bin/msexpand../../../../../usr/lib/debug/usr/bin/msexpand-0.6-lp152.6.3.1.i386.debug../../../../../usr/bin/chmextract../../../../../usr/lib/debug/usr/bin/chmextract-0.6-lp152.6.3.1.i386.debug../../../../../usr/bin/oabextract../../../../../usr/lib/debug/usr/bin/oabextract-0.6-lp152.6.3.1.i386.debugrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootlibmspack-0.6-lp152.6.3.1.src.rpmdebuginfo(build-id)debuginfo(build-id)debuginfo(build-id)debuginfo(build-id)mspack-tools-debuginfomspack-tools-debuginfo(x86-32)    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1`]\[ZaZ]@Z]@Z\T\@TD@TC@Danilo Spinella Kristyna Streitova Marketa Calabkova Marketa Calabkova adam.majer@suse.dejengelh@inai.demardnh@gmx.demardnh@gmx.desbrabec@suse.czp.drouand@gmail.comsbrabec@suse.cz- There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (CVE-2018-14679, bsc#1103032) * libmspack-CVE-2018-14679.patch - Bad KWAJ file header extensions could cause a one or two byte overwrite (CVE-2018-14681, bsc#1103032). * libmspack-CVE-2018-14681.patch - There is an off-by-one error in the TOLOWER() macro for CHM decompression (CVE-2018-14682, bsc#1103032). * libmspack-CVE-2018-14682.patch- add libmspack-0.6alpha-CVE-2019-1010305.patch to fix a buffer overflow in chmd_read_headers(): a CHM file name beginning "::" but shorter than 33 bytes will lead to reading past the freshly-allocated name buffer - checks for specific control filenames didn't take length into account [bsc#1141680] [CVE-2019-1010305]- Enable build-time tests (bsc#1130489) * Added patch libmspack-failing-tests.patch- Added patches: * libmspack-resize-buffer.patch -- CAB block input buffer is one byte too small for maximal Quantum block. * libmspack-fix-bounds-checking.patch -- Fix off-by-one bounds check on CHM PMGI/PMGL chunk numbers and reject empty filenames. * libmspack-reject-blank-filenames.patch -- Avoid returning CHM file entries that are "blank" because they have embedded null bytes. * (the last two patches were modified by removing unneeded part in order to make them more independent) - Fixed bugs: * CVE-2018-18584 (bsc#1113038) * CVE-2018-18585 (bsc#1113039)- Correct mspack-tools group to Productivity/File utilities- Correct SRPM group.- Fix typo- Update to version 0.6 * read_spaninfo(): a CHM file can have no ResetTable and have a negative length in SpanInfo, which then feeds a negative output length to lzxd_init(), which then sets frame_size to a value of your choosing, the lower 32 bits of output length, larger than LZX_FRAME_SIZE. If the first LZX block is uncompressed, this writes data beyond the end of the window. This issue was raised by ClamAV as CVE-2017-6419. * lzxd_init(), lzxd_set_output_length(), mszipd_init(): due to the issue mentioned above, these functions now reject negative lengths * cabd_read_string(): add missing error check on result of read(). If an mspack_system implementation returns an error, it's interpreted as a huge positive integer, which leads to reading past the end of the stack-based buffer. This issue was raised by ClamAV as CVE-2017-11423 - Add subpackage for helper tools - Run spec-cleaner- Remove problematic libmspack-qtmd_decompress-loop.patch (bnc#912214#c10). Version 0.5 has a correct fix dated 2015-01-05.- Update to version 0.5 * Please read the changelog; too many things to list- Fix possible infinite loop caused DoS (bnc912214, CVE-2014-9556, libmspack-qtmd_decompress-loop.patch).build85 1629454402 0fd6f6a7877ac5cb8995a42ffb725cfaa807555e2e4678964f9e26c9db715b84aad6b816f864957f4822d5050d3b2f844c392cb38f7dcb5682d4a5b3e25557dd7aa9a70ce1abc52510b66595aa2ca1e80.6-lp152.6.3.10.6-lp152.6.3.1debug.build-id0fd6f6a7877ac5cb8995a42ffb725cfaa807555ed6f6a7877ac5cb8995a42ffb725cfaa807555e.debug2e4678964f9e26c9db715b84aad6b816f864957f4678964f9e26c9db715b84aad6b816f864957f.debug4822d5050d3b2f844c392cb38f7dcb5682d4a5b322d5050d3b2f844c392cb38f7dcb5682d4a5b3.debuge25557dd7aa9a70ce1abc52510b66595aa2ca1e85557dd7aa9a70ce1abc52510b66595aa2ca1e8.debugusrbincabrip-0.6-lp152.6.3.1.i386.debugchmextract-0.6-lp152.6.3.1.i386.debugmsexpand-0.6-lp152.6.3.1.i386.debugoabextract-0.6-lp152.6.3.1.i386.debug/usr/lib//usr/lib/debug//usr/lib/debug/.build-id//usr/lib/debug/.build-id/0f//usr/lib/debug/.build-id/2e//usr/lib/debug/.build-id/48//usr/lib/debug/.build-id/e2//usr/lib/debug/usr//usr/lib/debug/usr/bin/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16844/openSUSE_Leap_15.2_Update/a484bd006f4ff339c7734d5e8d4b3c5a-libmspack.openSUSE_Leap_15.2_Updatecpioxz5i586-suse-linuxdirectoryELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter *empty*, BuildID[sha1]=0fd6f6a7877ac5cb8995a42ffb725cfaa807555e, for GNU/Linux 3.2.0, with debug_info, not strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter *empty*, BuildID[sha1]=4822d5050d3b2f844c392cb38f7dcb5682d4a5b3, for GNU/Linux 3.2.0, with debug_info, not strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter *empty*, BuildID[sha1]=2e4678964f9e26c9db715b84aad6b816f864957f, for GNU/Linux 3.2.0, with debug_info, not strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter *empty*, BuildID[sha1]=e25557dd7aa9a70ce1abc52510b66595aa2ca1e8, for GNU/Linux 3.2.0, with debug_info, not strippedPPPPEbRTDK4؈-libmspack-debugsource(x86-32)0.6-lp152.6.3.1utf-821a28f109dfb0a95ebd2d280fd0c392a0a028792327a384b802e0f0ac5fa059c?7zXZ !t/K7l] crt:bLL PHnqz5/6фOW#k/w_~vW‹eNt4WLF }$ak!MVExz-%j#M~ Ѡmy B%ۀWL:p$:]L`psmПC^Gt~bA$x,ݺT0W@|_rvN2a-bu'Ʃ-H-iӟ\*l ,pDwV}'=Kj6SKh{i<_]М>^FHw3:K>=o,@:PL^+`L||&c A-_C8xgD0هshu,Fg93$y+^P~CTP* ihWV7Ww, As]EQ@쮭YE/tH*Ael}+j@YFrȂIeVFSQnEԸrsMf034 ~ +/(a%>"07eH Us)Q@2o&xk}MC1Z+I湹*4m1'E= &x;W!VO :b\ҤE{%\7[׉*+hK/< d&iѿEmdsm5 Ņ}* b _Ql<܄Ҽ VU:Rw^7j% Ae>/ɗS#uYHJGuX%1o ¼LDA}HIr*pD+?D_ua=ْIxgxLJ8ۿdL3%D3>*z8w%7HHuG@.>!pl7F39=G3erJhUp-XuYIo0nbc3ۀT o?D͑uՁQfz<&)Xb xsMh_2VڨGVw.H& &Gsvc4B^T[K2@?UǷbtӂh ;7TN0F\m\'p|cVKh\s2B+A4IDSED!Ruj&,ꢴ8_ PJAIlnXoBĂKFj\[5ICڃl BOkXzs"Uiga|] [mEV?Ic6{>{ #l9E8gm[]`I?#{q VD"*_tS^ʆ|&8<L,4-#/Zjg(,iP>əUPN`hA{B*=_UR2JvA|lNo{?_hAl]v| : /!sSb|)/#6(4(.*s .3h sV pϭyy k kR  V:On6l |K,gPDuKh58R[HA, !9tK74@}h'gzB[c72P'cX"d)8Cb &ȿ(\&'T+AQY,y O&m IJŚ:w b*ؔ;0MmWֵ&Q{% (^?_q3. djoaZ}wǷBqۧ}ڈZ;2PR/BW2>^s$8nOVҏrhoѶA&˜A7[%a!P7 / D[ǖ:{- I-"rkK+{y> _LT-˔VL!eyU] w>[8s,ˌliʒaI_c[,M^ h0M7a&fHB~bϟ`.}^,_UbOzm҃x#.:ݠB#(rEČYRt.AKN>JX?Mžm'#z#{ 尐8f/_$RśK(En()h-#lglpgر)©V8KĿG31 gN^[;>8H|Ѧ r6-H lOR6(^;>s~XMj] (B^LwX uyk=x#p b۪x,>l(l uCX,{7G v}Zi^5+Ŧ׃B*OZܰ%?Z7yh|%W'wg a"2mf " PܪSH\唻)!R[H=6 bjGP8{ 5TS9q? s:,G%߰;]穡#,ݫݡ[[0 9/%~Nk㽛v },PX2|s}Q\e="dΨO{Kukj,0q=ESH8oKIn%~$^KLW (&r*GCQHb'QK,tԤ2晓 vX!5 a rO;]y{^] ?oĶ֚/:VsQi;H*:]>lxc9C% (ݒ%Y7BfL& dz'ꪝ~_[k/d~ܤG4^X$ /R-nDھ+nrw(#J]̵xB<ŵ0EUքk#4Jx3Qlơ|՟s*/),) lr;g?+ѩ2Gfv3ucZܟmt3*3ȉG?,m2L\(?F9`L SkQn:z% u:ƒcWήjDK 6w^ $Cx GЧ$ҧc^e MI4nv,*9TOm8-;ߨI8(E'} ",ڤ\q\\aiKSosϸK<`*Eͼ/m=f"w4l s=\Pw%_i4b9WN{fni/sNQ>3~T/(䃎03vR'*-ɰ(C#ϫlZSJ 2ȃ}]#4|B_0n%"vLL9_/ZE}oy`,:D .ծ#ZVCH1pK]%c(Gr [7PX–LsDD.^M$RIsx3aD  k|Zؖջ^"jjyhS"NM-%$8DqkgTb+{D 0SL7}MHy5mj{vepT:*zdmELQ>niaV;bkcSlEp_;楉1u%N FM`H( V_JjV6W$96Q/ ZK!'u_׺\=V;$= 먨{ksܬ ın׿s񓙜Iy\;Mk}ssVYy_tN9Dn`::mr)bX+0kcsj%4& oI!. uʡ^e Gw M:UWxT6˙kZ- o/&JiHғ8l! T d9u/s}( X:u^m29gsmEPFLy;m)Xp/jE1Y1&G@Xʱ[|@Dfx6\>QF McKL_hզ[8勗ٓ`QjkMt%UYU|m=ů©Kr3%㱱7/PeIcha[nfSf nxzbgXcw_%]Ic\wqY bPcJ|,m 8x)ŶܤKt;9cK6mU.ׇ!`9|ZzϓܮPF; RÈ׻NRjcӹ>ĽT&7s#y0p|Zjc"Ox-Zק:@K_*}:"=L'{Iߦ+eoC m|MBȋ fƇw7:N#.I 4ؘMܭšc,`豯A,m}}Mo9G4 yC+:Ss'/">y=Cn6輤 La #h02#x:)_G$X`nb \6YϤ{8r s7 M@[,6 D{7M ph.Oe`i_u7hemW /AhmlutOŐ+SZBۈ!}$_j_`%ET_$5j#:pE# &M^}TZubZGl13:WuqrvIaijW,Po(~)ޫ:4bR<&x?V0)A@ `lNv#L>z1WX \3~7Ψ ɢSl{7,c1E f y)?͖8tM.vi"=i -yds 펟z^KB,E.˗1dq*f.U1 m6m&Z9T٭.>QQ]Z;X_MӊAgDe<[]AEQ THK# 'ckOPmmؓE➦U,EJv.4[+'[2!SH~Q*R6_#oQB|G+njeX }Ͱ-V9Oj D 3:\e㖾.4wb}'ɫ@tOnֻ}?MBAB6='XfHβ~бĠvNKoEi1N*e)wo}\nt⻱OoEgިӵѡ1^HOy\ ⯵‚eoX+b̓KHOpkS/`ͯ_*yQߺʘ߰CLhrɚ}( }zkVdn(6 9^ףͼgo*ؘ2`${! \5(yxN*3GJiGbhVmwg-HCWRRlnAu-+HwH\J,g ?9{(7,-Rŝt0YuWqj3fhMiK<f!rЧuzdkiVӛOЫ xjVUrn*4:rєEQpxht23EiT $rr\;pV+Bx&GfggsҶ!+C>0<<ǟ \O0Dc#atjx :)/lզl'/d .D830yM`TlU&3Dž_$uެMhm{i^oBɟft޴LB.^l+ALP:sR ˅5:iGƤӚ  s"" }Tf[}^ZKH0vvCx3 G;<}9BCto yDb@RM*Vh,^[ 㡼^GCe>\Qg0'8ߞjQȇv ln5cfWCؼ3OM۔C \%YeTI`5|uGd !}``xU$r9wcNKtuFt۸FGc:M\s,Չ/O䤔Y"#8`󏅆W&)+ou}1 PN>p YRCɺ PbD`@Pr3wR5}xePΚG.(|H}IfC`D]F~rH25}`[ 7o+/ 3G/iԻD=F;.|qFm|#ʉr۾&)<;P::'Qv@m?3*,' nrbŰ- &8'I4&r?jEjqNVTsһ kS=J5YH77$>-(ti*ljM)W A Q Py9H~bC x%=uiy$Vu7xM=OD%)V|1MEÿ#2|5nM MQx=bNn=(/&3A '?  4[4h`}g ,oH=?dfj>ɘ96ja7̓+o(ʅ.ƥyVc :j/tI[dرqhOL?;V#B\"U6 ƬPldr [`zC0Bv%ErFLZ\c;MXM,=Nn"o#"Cg5n&/dePu"B `n: ]'Y7 T.IEoq. Sϼ8qNGh![d5:&Ql©{{PK뀧T/ziJڨ40Kd?PR}p'xa jsB6D~h;DET89p@FXF>#΁~mezT-?gK'[8 c,E\eܒZ+%n5D-);Ս&s-B~![r 9677LG l8]#lihiP?=tyɐd;6ti?3īx'T#qd X4rsr NeO"t.Hg0ʣX`k:&!,.X.:}kܕ #3_6=4[!~fZ8N"9wYɣDdNp" wx'YMU2{o]*̚1v3l 8V4od@,}I5EyTIu#x!7P+MAOd$({}/E';օpAXjBr{;% Dz$@8 z Mw*3%χvD DykT.T;7w h{>6E \zt[4{S!idG/L*B_RF&֌ds%q5 lZ%ؿ#Kp!p3P2y a. !7hA rj\ȋn[FS{'@;~Ed-#=^ 5LVFX.-0!1}/ß Xq!O?;75t _$m=,-Y_ɡ>-, xeS$~mhNQղb}ī f7/ݑ3H,\t"zw^gO-6l2(nmD@_ĶLDx*^qQ;63֩KvǠI/I3q'U6;L~k~Xhڨ>̣y %eQǣKPmk~]| mNy_Ge$08i.כ$JX'0l$bsƯ./iOY~6mĒ`l>ˎf:_ktmi?`Ӣۘ &$5 | _ilJ詭&pzx-D鼯 ZWcxB;=NCSkoFܓl%oSbS$)-a̯ze/tKVP.0Unط(wևGmG5ڥ,D`WTHs/,cK%OezLHLtCnf2CaJµJ})9 ʹ6\l<=j^\ n3+͡0M YHY~&|-ۏ1_ [~d$eA2cD!ٙGr+ p_Af bUiXA_iLj =IHLe(y"qV.DhxR2=6 a|'{*_`XfѲQ6޻u#DTxf'dC^ukmvl0;,|qL^`xPp%ZK┖c'-7 QwA39 +ebĆI)鵚^uѹr)ŢpUpJl"Ui,ddaPbǧ2tiS8K{/]0+wGK0|fE^NNOt'zӆ?0DH%̽_KeSD90NfRj|!N\4i#3P075+I9R1ѠOB|lS1Qh=ʠMPsD*>oFƱY>%tfz L.2ME Vx?,ܖR|2[tv0 G=X4|t ][h z]IyeyAliR  8EfMA_3@ۂGTꕥ} 5&GKMA̲RlVzS?OR;; u~2UCHۈ,C75'|5IwsB@XԲ37qEt$(]˗紁gR.xA]UQWOF5Ԣu7.5 =%m:Nھk9Te|E( $> H犁#jZX.kE1cVqJ_qG /BBI=+믖~tܝ@| 63D4v'Qa+b?Q: @~aRLC+TcQg LDZ.#:z:7mCќ0[(%(sN0lr;y'.Zu8fL#`bq z-Ed=K>bI{Xmq{l'Ym̸NOƽO^ qIWrcm݂mr{є]WQO=~]t1 Z/3 ae>Teˢϥ gfg 񗱈W: ʴٺ1~e'7@I8,Ps#I Ψ )Tihxɒ7Oϥax#Mt^N4?+i%g4cXݑ\yAIۀ-[5#UeYC;o'Lqx5cqQ4󗧉R ՟V\ Ha^Wq] C9NYM #ýQS90qߨyO>F{Lҍ 3\P6MF7ÊRU=lo04|=YŅW; =m!4TУ{zV2VPbwl!$8&AVȅnƔM=I6C-ЩD2bѫcYYIJ[^5/]0y|SGtzZ?ˆ2ջ@)t+ijC)*kl!ꔰI>¶ .Qم|2XӊȊG a bǂЄ=Da-iT$C?ݦ ?NU@rGgORµK\tr)_] i߀cq^O+g,Cy~A"U_=J"u!M#u2)@gR ӖV5Jދׇ upY΄I]G`tɦp,I"[pFTMfU]/rO8QbcBV29 ?\H6Ǣ$VY&􁏊2_Υsh[{x?6{ͯTC3HR]8MWƎI^ѽnG pY6Ah9kU6݃!LDVT .ֹYK+c$,_)a6ׇ-!.Gq 4ls))IGy#q%"-үyR$g TaW~REx@=GcNw+$窅k,޾?<.v m]K2vwY22xPQeI|p]׭iNftg,q,N1$E|$wcG 7Y妸@S&ٮ jp vqUtvN8 7?xf<ݸڅRctn.0w6PjdJ+[5ߨ}C,=qƊ.><;DlmC'S]*P`2j",ub1Jɶ)o)G