libmspack-devel-0.6-3.11.1 >  A `}p9|x#%P<]DUg(7 iD  4dfE0*΁oF{z}}j[ô-VbZ"{T<ePYzv]WXʥI9[tkF0o-yOGB {=Iaj z{:Iv ٱ  ?XviuN\ 0D'e; = >gnu:4"641117cff81bd2a6f5bbbc13ee36fa97feb5b3e5f3cb0d61798942874e6eb26e3ce6ec4cb417e88dde9708468780a3f7f7335443Yd`}p9|8a!_,mx<ϙ#EW=7cՔjyq9YBBD2xCG_?)Nbuv^a( N-`2Ls63$τ1Ɣ'qpX K0C`%Uj.7)c芧Bit , A" &Z7ȇ Jae%y2Lz!~ sB\ȍ^dj-;HgC*ƥzgk+ь?CO8q0X^>p>l?\d  \&/ Ee    C Xds(8 9 : FGHIXY\]^3bcc defluvwxyz XClibmspack-devel0.63.11.1Static libraries, header files and documentation for libmspackThe libmspack-devel package contains the header files and static libraries necessary for developing programs using libmspack.`Ysheep62\SUSE Linux Enterprise 15SUSE LLC LGPL-2.1https://www.suse.com/Development/Libraries/C and C++http://www.cabextract.org.uk/libmspack/linuxx86_64[ށ`X`X`Xcff93d08933124485f6c59621abd7d6d4e3e4180d01e29b28081d4cf0f80e6f93d7f3a5c7f2048aa98240a469d43a3071bc1db9c96a7657d38caf2318b154da0libmspack.so.0.1.0rootrootrootrootrootrootlibmspack-0.6-3.11.1.src.rpmlibmspack-devellibmspack-devel(x86-64)pkgconfig(libmspack)@    /usr/bin/pkg-configlibmspack0rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)0.63.0.4-14.6.0-14.0-15.2-14.14.1`]\[ZaZ]@Z]@Z\T\@TD@TC@danilo.spinella@suse.comkstreitova@suse.commcalabkova@suse.commcalabkova@suse.comadam.majer@suse.dejengelh@inai.demardnh@gmx.demardnh@gmx.desbrabec@suse.czp.drouand@gmail.comsbrabec@suse.cz- There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (CVE-2018-14679, bsc#1103032) * libmspack-CVE-2018-14679.patch - Bad KWAJ file header extensions could cause a one or two byte overwrite (CVE-2018-14681, bsc#1103032). * libmspack-CVE-2018-14681.patch - There is an off-by-one error in the TOLOWER() macro for CHM decompression (CVE-2018-14682, bsc#1103032). * libmspack-CVE-2018-14682.patch- add libmspack-0.6alpha-CVE-2019-1010305.patch to fix a buffer overflow in chmd_read_headers(): a CHM file name beginning "::" but shorter than 33 bytes will lead to reading past the freshly-allocated name buffer - checks for specific control filenames didn't take length into account [bsc#1141680] [CVE-2019-1010305]- Enable build-time tests (bsc#1130489) * Added patch libmspack-failing-tests.patch- Added patches: * libmspack-resize-buffer.patch -- CAB block input buffer is one byte too small for maximal Quantum block. * libmspack-fix-bounds-checking.patch -- Fix off-by-one bounds check on CHM PMGI/PMGL chunk numbers and reject empty filenames. * libmspack-reject-blank-filenames.patch -- Avoid returning CHM file entries that are "blank" because they have embedded null bytes. * (the last two patches were modified by removing unneeded part in order to make them more independent) - Fixed bugs: * CVE-2018-18584 (bsc#1113038) * CVE-2018-18585 (bsc#1113039)- Correct mspack-tools group to Productivity/File utilities- Correct SRPM group.- Fix typo- Update to version 0.6 * read_spaninfo(): a CHM file can have no ResetTable and have a negative length in SpanInfo, which then feeds a negative output length to lzxd_init(), which then sets frame_size to a value of your choosing, the lower 32 bits of output length, larger than LZX_FRAME_SIZE. If the first LZX block is uncompressed, this writes data beyond the end of the window. This issue was raised by ClamAV as CVE-2017-6419. * lzxd_init(), lzxd_set_output_length(), mszipd_init(): due to the issue mentioned above, these functions now reject negative lengths * cabd_read_string(): add missing error check on result of read(). If an mspack_system implementation returns an error, it's interpreted as a huge positive integer, which leads to reading past the end of the stack-based buffer. This issue was raised by ClamAV as CVE-2017-11423 - Add subpackage for helper tools - Run spec-cleaner- Remove problematic libmspack-qtmd_decompress-loop.patch (bnc#912214#c10). Version 0.5 has a correct fix dated 2015-01-05.- Update to version 0.5 * Please read the changelog; too many things to list- Fix possible infinite loop caused DoS (bnc912214, CVE-2014-9556, libmspack-qtmd_decompress-loop.patch).sheep62 16267136890.6-3.11.10.6-3.11.10.6alphamspack.hlibmspack.solibmspack.pc/usr/include//usr/lib64//usr/lib64/pkgconfig/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:20476/SUSE_SLE-15_Update/7c4c7e1b9c8cc608549a1760c4eb45d0-libmspack.SUSE_SLE-15_Updatecpioxz5x86_64-suse-linuxLaTeX document, ASCII textpkgconfig filePRcwSqutf-81b144ee854d56480b5b871c0537135305dc865305768ac636165ca42c1f0563d? 7zXZ !t/^B] crv(vX0Twِv̫C봷):-kv Y,u\9)B\Ş>_Z5DKMuaSj#Nnc3"]$JxX\{e@ekp! mwV!߹ 2 f-l赈zPȰ/4ρE i;.Lzl's ]OclrȞA/ ֜e R=q8¨[/B|>:7]^k:Nb*;f9#o.lޣts[ľs@fuEq3ӎūi'/Fޠ m]{kf[}49|Og3yqp{`Ѹ= Zcr7"tn5}51E`9AeϯYIXȅI8 l;GscP0^'SSgbɁ3_?Q3Y=̬Ԧ7 o(5e89r̼<A5~L笻!2N#c d26ȹ6RS7'f)LZyqS<'b s<"4a݃p옙 Y[vttD$m~j4.5atӖLTۄ¥-˴}:k;jOPtM>ad`wY0>sIկ'A=:L .D\T;ls |?~ֺq#H؈μgLλf~wkA ߰)(fe61 7)GA]Sh%!X>!v@Nګ}(.|)ŵ-SC$GNe$6uzu<h JMzuȘ<]ތdO9D>94͆@T*m_C F5{X`ԇbswA`hrv}gm.K׌8@I1rҌImsGE<},ZpK YiOH1O}CZtKj 8c}>)Buի5ަPN, q0Sغe5TC<̍\m̃.Ol.}_ ˷ɧ RYa{E1e)w}_H/$MJ|٦҉tX ?) Ia}k|X R{`pPǜ^g6_C]`Ȯ%ĥ]%9+)䃬Kc%}Xe g5Ԃ b@>Vu?K%y4Llp IE9cj.[Rz`ECP ’ 8=h9(Z7r=*|<\iDpIxHeRffѶ}L€⯶08}:kźQ\"1mj {ZO$e@>[*0wv+etg~ϦCJ k}N&̸T 0D\FOU3a Ty1݇ay nN@!b9D\bM/u/(1.ԓID{*u㙩(W(JԸ>0١{]VT %oS!}DW|b;RQu\(`PQ3'AAB)y^*zdtB/(U$h=34> ޲-ts2wD4` w??IfAzG>zK719Q:M$9%PORu\|U' jV45<R_m̵^߅UxF[䅹vEpÐ|_ pdnCӰkD@1Ȩ;ٙ]}8AP%ΑG<( Y(Ԍ !k)R*ߪH%(e#{#z;q#Sv%lä\jŃ>ٸ5iHynT(u8u0!8Ԕ9DYL]:-ߨЪE!88JSbYoKiV |!ao*ƃBmOɟmji`#nEm43`JfsZ&s.p^ gb|kƥƈ]^*? ZZ&0b I. cx2Q֭K=PW j#|> D^Zw^͓0 A ycc񝹲zJ62RGY&TnhN؟ f «sv( k;z(z=jY9A wqQg& #eVORܙA_kv5{ E|< s^:u:mmz1{Z,ϒ~@ bbDG6;*,l<86<4ZkԶ}褈: aJ\pPY\hPu.x iBdxƘ,aS7'Ӌ}O$9[_t୒3Y<_e&&}2>LV*cofQ/LIMKzRvV$[eeɈYɍkdзURasO2 W*Nʯ[zaTJqR䤡DyKCIk8",FBCD)T5cTH?p!h$0F{Q/ØB<B0*Z+7K-"{-Tf )#Duyq'²)7pjB$R;{QC:uux, YsQt-b1w{4tgڜ *@%AA?XI&K}؞m1+QLgCT8nIxWb =( EsT179v9E4>:JqOVUSNvIVt82 v+ *b`E&a刺^2K#&74PoJ ^쪍vSxyfQg]pbg lDGW!Jdrܯj:CbF=;@ 'm\8a|vLUⲽؔt),v-{r`%FI;|%qg2hEAT)ze!,xp> \>k?Prs{q ɀ-H`(TI<|uNS:K.z+큣V= 45,suvL,T Z]o{ 6ڞaS1wOuP%IUl&Cf)`[y[ST"tc7I) tjHs|G}cMmbiRv >zf1FY\ D oҊ4qt ǯU*T:ٚMe0M^MUXqhd{,ri[g+ С8m {Ԫ^tt,qŗyY})O&UWksx&?34TS<‚õZva9bNP@M)Zs.$ Ux'vLQFqcLK* ӡàƪ_jL3Yج,6nVFǿlk$:yyϨivtB-CFҁuh29ie+!Ѱ #Х֪ ;agWa[xִcNұBsS=! eBœKklZUQ$Z]L`6jpZUPe+t!} P&xQQ;1 AERfSd8R+%_Q),T|եE+sڹ(򬒳 1b"׬oW2N*};Nl=?S?W=j1i0=pX3 UsFo#nvűm!}fbx]2L .H\ 8ZrQ<Ď&6kx8bX\F @n+PA CIlb3fI [ϓ{qDYK/EIӱ&wR>Ms|asgcָֿUb.!hvEcɂҵ7Z(ȓѯ >X,W>evW78DQa2.$"`M#?, h,R#"&3*,`eӐ m ̱qî_R2[$ E෤;B Dߵl~Kek‘bLHm}J#kAz*Vj<<\y劯ra@߯eܰ.DݗpۑFd!ߩy,ymWDn-`48F`RFZRXs5k˷;dHzpq^o, Ft WZ-W3MbwTV8G..fu;y3u=g {Yi,~e9W3>XQƙyY9Dқ7/Yk 1V$U)Ջ Wv>fu5X8Ei-htK^7F{@ThCSl^rD~&yT?z^̲pExG-q$v^_mք4&,v"3 ?*;kKE׉1"|kR?;e{c !vzRm:b6vRb/A(ѩ.}Dc| !řnABEr;3eA` 8YS yJ5/W[KOy(L~SVȠDhW;&"i\qIn-~t'6 ͿKܯ>M8↴K±׭ >b `8Q|Y#N40*[)e0a29-%Y{LǗ|ܽQB'7mVo`j r/`ۋqR͒/m{ ^hCϳLUM̔ ݎ"=cH!c8ʎ}*KSEyяfvyj>p+k&Tt,0$^X!qka hĻAásGY K\cl{+N `zȥLܾ:]Z"btZ]x,6]3ɥjm(7I plմD4=Y #a?M'ጏF.o U9 3N]}z>4#gu  L9& wn\7KwmuMnbeAĞb&7_;BؖrY!cCϔ2ˠm8 *VVbq yCg8d{װbPJE$9FdvnӫȩCI3:{YϮ,ך2t|WU'LjqWG\O[= )18aΏ)Gy>B㗱mAz!$n؂Hr"GR8 @$f-W U-Dӵ&b;hMd)dIg E0-a^j0 /$m?QߕܕL1,c{sb_2W۞xM}?=W9oI jiw0R=4E6M3ǃ G]ՠJ7 "w}oVd@f©F5#RD ?G#a ok'V1(9BQi3is8qVH!6+K% 1Xg%9t#4y-5ې'b|{Wx\j-Z_M X\ \7_';Jgݦ_6_uą_>F8N< S_J C(~t[62cEM ~׹*P24̹iU4Itu5REэv*B=1e{P$Ks2p=6*sHĵF4Ujlopn18/[dRoPco@գczX\.zo{>Q'f~-vn”޸~*`4Ď!a-f_ `,niڲgA(.` Y/uޚơ0k(AYf>c:Klm6b_w"2Љik;ZXY ݕ#5Ư0g6)+ЛH~4khKϐ}  KK'$O9矣QOJ_,ǰl͕C"X룉U rXN#sE }k~b=G3f^ w!! <:u*Z@GTQJe:-NM:Ŭ@$&?]K}bk܃n_bqw,~LA58OeVPSn:&D>TY0 {|f# iقrɼh؄j6SyBY~޿BG&~J@i5vTCO8Wm@XET{9Z]8yAisRM%F׎SUb􆡩&X(/ c^cM~Eϴk:EMR DjoX[#D>`@aAf2 ,VH{$kJ"3kT. ׅ)^W{,p/pBX- +s[ax9*$[= ;%%yjP̹H*sf҉aA?X@ ϲdj7M|tEU?=:V |DQ } I[[H}MVUYMoJL*Jm دle9l ݶ$!ge"LƗ8沬 1y?Qzh0 儜W6?֦'J3MຏBy]=TjOMsPv_4HIx;Q WQ=H N 3 <ZZ>S!da⾕ AO$<J5TŃ=VIgxsW~ c||pIf9v#E*8k۹R(AjM3q3z2ﶄ (ZQ!B{5Q_T|6Psp)7 ϼyaco5?a=iZ`h*QlQ\M_ zƞ Ŭ0̋<+ Z;qpbjЈ<̋z\ex.L d>=('1f\F&@ΏokO7hZ ~ջ@StVI75TFockם@kr1cΉc-ʉm/6?}G3 nى9XrId.'Ԋ:JOXl z. $"!fdC󿍽5fŔ|JCGbx?u^K?g6$6GU~~~2W|e@JX? Zm$ɭ۶ rcmN)ڽ;)'[V@=N5KZ`ڍcMG ?%-4{M?aؼ,<ں7ۖKta,|CWE?cuU2 d-VL8mbқ3'X3y (!J^哏pignMRګEhNg/aTʆf<ˮD\TN]grמ蚃ڠXѨe:=3U'L DŌ} Iļ lŭD4> sJgL\G6vK'VE~.hGfRgS&8:FR)dBo-Xj|ضPîfьc [pqrq*e/@PT[ VoKC><=vEb1*j9F=mQfiXc][L %QD᥎* ؐwM'LEs[y+?}%C~,P@&=jKtQغga~E'05md-={cڶZveED[Wb4\eH<%Xw :uy !Z+owiA`be`]6QU (xP ק1tв@.Ӣ ݣ}xrѽ-xٿ}!(DFxs嘶ۡe$5-޹Yb4TE{y(uN6b6 $2mkؔċ "%Zw7NT-X@'7B(A./^N 𔈄'"0&DiR,ܔ%hDE qA@4 M$x3Ҷ' :1cfґSCrQUJqo̵߯IC!ΨN/_/RZB\u";_9{&k@ypQm{fE ֓Ln6C~!F>3h%LXV:RxT+ `֗UJühD SUpQ0:T8r.XNH3 蒌=7~FI ha5}F1 wKKX;*gVԼRBs-q+wbMTh /шSčsBqe$;_S!roFw"ZF@7x07PCc%b׎Cqre*3T +j(&2ࣩWS[I|4[BQk\˾Ts3@|!kUCR䊊9%,0Q:^5"1Rj"IG=a:=iܨ(~N~h'xNjQGoW3}iq4fQW]XKֹtp! ʹx&V-SKhG/!u%8vњN3wH3B=Ǝ/sIk|w^Y+nטrc̸ؖy!o,8H:<\1 ^ju?h+Li-LztΛΕ~'̨Pé*jqB5 q/200G)QpO@xNln+}4I]Ig&FȦcLbJ-Nڶҩ *}G4dDn 8/dL]SQhGH]`&LxrhՓ&J9zj*ٮvTGEW) &DmqPZ㘁ίbPa53Z#H~ `->xF0B9r9@9NFk]$ ܩ*giKוJʷgL72 5Do!$c`Jk!+o v`P? vυ?x71j zbu F? N\mt!qĜ8Ԓ2r*}K 12(i揢/!ǐNg`,5!Z ^o14xg̽j_b&nTWi1j?@h{$9>Od6-95C5˃cy[[ƤeGcAd(& "P]%{rRn1ZKP1ou%8RaZ-drZQ\A=[=j3qɑolpfh:YQ Z#5IR+]>ɟ#w̤EoIX!qYu$t>5; *kV7#(2J0uz̵W (C?@_a)KGY@zuJfP@žs*˸-G g6sV7gRAD2Z]6} >=g-' nD,Y㯘;j>ҁvv[hгq۔H! FjYԪ{hŐ9.EJh_nvR .k8[`wI%Μnn_ %j/>!gMxi#,|ŁhkOSWp2SӼw!?b1~޵i纄.QG0q;kJ/{WV%)$˥X&!@KcD|3cG"R\S0w2 /XllВ̲OWRi_O| d i`-iNlVNI -ZȦ?y|JQB_m"$oz%}k_*%W_LuaVfZ[2;F*FDf J;̷c` @U"_ H=4[\[$'JF\[R*W*&eV V TXfM *m^(~x08ZӋO!PUK~XXĈqqm+LniyJ݌TKm")FN\68/["s ڌ>_|誊i&mW'v>QTU5…EEqnqf8N4/nM vEB@%|:G},HDvQyyE ZySp!|SL&$G r8'wOĢ sc`xY6>1")=g$}Mbt'4m!4*+h[%TjnbSngHC҇|yi:̎,Bg&琄԰Lإפ͚B) ęJ}U^veXG t|Dg SLPY+LzA"79 r3ZŹq*͹ O^ֿL񏓼=5>d^p{+-8q1ǰ *D2dxBF|]k`YQUV=Dx``ߜEȏL9bM~}jbRgLkMR q7Hɧ(S2P~{ɭM%2bb ^Hp_<售&*ARB "KPVQKO GwTj dhgili6U.ђ&Funj ,cjQaQ!,qFx8Rɳʚ|ՄPF@m`Wн7Us YZ