libmspack0-0.6-3.14.1 < > , ap9|r fv&7@mTYv: mgC HA\V 2̐=*د=
r⻧YFC%\w"#:3}u=L'\|A0b% :O#~* ki lʋ6B۩!ǖZ`h"ϛKf, f٥UCHϛv:DBk`
<2%hG4j]!hük,~Ǿh4xpL xwaβhy3< !U$B]?7 .v > C ? d
Q 5 V _ u
0 P p
( 8 9 0 : > @ B F G H I X $ Y 4 Z X [ \ \ h ] ^ b ( c d M e R f U l W u l v w \ x | y z C libmspack0 0.6 3.14.1 Library That Implements Different Microsoft Compressions The purpose of libmspack is to provide both compression and
decompression of some loosely related file formats used by Microsoft.
Currently the most common formats are implemented. aibs-arm-1 SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1 https://www.suse.com/ System/Libraries http://www.cabextract.org.uk/libmspack/ linux aarch64 g> X ? A큤 aaaYNUqYYYsUqY 4c19c494a325ee3b7045546bfb15ee5904512d33ea9f7f5b2dc7801bc3e98f3f 3b53007433803d17c51466a0b229d1e65ee97fdcbdc1f73817d1dc77f0fb30cf a190dc9c8043755d90f8b0a75fa66b9e42d4af4c980bf5ddc633f0124db3cee7 2be3032b574530cd3d9d24a5dc5d54276db376aee8f484ac3e232567f6c8bd33 f9684b051faa8284c32e36fc98b117c709053b7b771d038770639405ba07a00d 4b42024cdf112c38de8e198017e931d952e1a2871664f3372c7d3cca50cc7a15 libmspack.so.0.1.0 root root root root root root root root root root root root root root root root libmspack-0.6-3.14.1.src.rpm libmspack libmspack.so.0()(64bit) libmspack0 libmspack0(aarch-64) @ @ @ @
/sbin/ldconfig /sbin/ldconfig ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 aՈ@`]\[ZaZ]@Z]@Z\T\@TD@TC@danilo.spinella@suse.com danilo.spinella@suse.com kstreitova@suse.com mcalabkova@suse.com mcalabkova@suse.com adam.majer@suse.de jengelh@inai.de mardnh@gmx.de mardnh@gmx.de sbrabec@suse.cz p.drouand@gmail.com sbrabec@suse.cz - chmextract.c add anti "../" and leading slash protection to chmextract
(CVE-2018-18586.patch, bsc#1113040)
* cve-2018-18586.patch - There is an off-by-one error in the CHM PMGI/PMGL chunk number validity
checks, which could lead to denial of service
(CVE-2018-14679, bsc#1103032)
* libmspack-CVE-2018-14679.patch
- Bad KWAJ file header extensions could cause a one or two byte overwrite
(CVE-2018-14681, bsc#1103032).
* libmspack-CVE-2018-14681.patch
- There is an off-by-one error in the TOLOWER() macro for CHM decompression
(CVE-2018-14682, bsc#1103032).
* libmspack-CVE-2018-14682.patch - add libmspack-0.6alpha-CVE-2019-1010305.patch to fix a buffer
overflow in chmd_read_headers(): a CHM file name beginning "::"
but shorter than 33 bytes will lead to reading past the
freshly-allocated name buffer - checks for specific control
filenames didn't take length into account [bsc#1141680]
[CVE-2019-1010305] - Enable build-time tests (bsc#1130489)
* Added patch libmspack-failing-tests.patch - Added patches:
* libmspack-resize-buffer.patch -- CAB block input buffer is one
byte too small for maximal Quantum block.
* libmspack-fix-bounds-checking.patch -- Fix off-by-one bounds
check on CHM PMGI/PMGL chunk numbers and reject empty filenames.
* libmspack-reject-blank-filenames.patch -- Avoid returning CHM
file entries that are "blank" because they have embedded null
bytes.
* (the last two patches were modified by removing unneeded part
in order to make them more independent)
- Fixed bugs:
* CVE-2018-18584 (bsc#1113038)
* CVE-2018-18585 (bsc#1113039) - Correct mspack-tools group to Productivity/File utilities - Correct SRPM group. - Fix typo - Update to version 0.6
* read_spaninfo(): a CHM file can have no ResetTable and have a
negative length in SpanInfo, which then feeds a negative output
length to lzxd_init(), which then sets frame_size to a value of
your choosing, the lower 32 bits of output length, larger than
LZX_FRAME_SIZE. If the first LZX block is uncompressed, this
writes data beyond the end of the window.
This issue was raised by ClamAV as CVE-2017-6419.
* lzxd_init(), lzxd_set_output_length(), mszipd_init(): due to the
issue mentioned above, these functions now reject negative lengths
* cabd_read_string(): add missing error check on result of read().
If an mspack_system implementation returns an error, it's
interpreted as a huge positive integer, which leads to reading
past the end of the stack-based buffer.
This issue was raised by ClamAV as CVE-2017-11423
- Add subpackage for helper tools
- Run spec-cleaner - Remove problematic libmspack-qtmd_decompress-loop.patch
(bnc#912214#c10).
Version 0.5 has a correct fix dated 2015-01-05. - Update to version 0.5
* Please read the changelog; too many things to list - Fix possible infinite loop caused DoS (bnc912214, CVE-2014-9556,
libmspack-qtmd_decompress-loop.patch). /sbin/ldconfig /sbin/ldconfig libmspack ibs-arm-1 1641549716 0.6-3.14.1 0.6-3.14.1 0.6-3.14.1 0.6-3.14.1 libmspack.so.0 libmspack.so.0.1.0 libmspack0 AUTHORS COPYING.LIB ChangeLog README TODO /usr/lib64/ /usr/share/doc/packages/ /usr/share/doc/packages/libmspack0/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:22325/SUSE_SLE-15_Update/6e0c48d65487ba03676ae772ed09c42b-libmspack.SUSE_SLE-15_Update drpm xz 5 aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1f837870f0b7f8cfab2db29e2b6f8c7c19e83fef, stripped directory ASCII text UTF-8 Unicode text C source, ASCII text P R R R R ]p9#\F utf-8 fc746ab3067a09b2fef755d8c26df3ab83b03aafd4479f1ba5e49a53eb14f523 ? 7zXZ
! t/09] "k%adM8I1d9y MCئg)MJ R<DkZаG j3Ѓ[M%Ej9UF ..0._z
AW/ (BWqF+l!Ǵ
`= "Zbh2ؼ 3unh]C#`h2"42άD5Xu26
NzUQS@?'BӒ;@ 19OyE7y8阡u|b
)4* f݅D6 w``6h@874 b}>ǻ dɏCHVA|#bO㪇+૨ oiAT C lCȼ`!G`Fo@w1N
8Ý! P4ES#@[^:iTvi^%<>ޜzo] %O6"ddAdM"
kƛw{UKAi
Q]2<2g4[nI
^҂Ü朌 `M Vlh"M|[prXPBAf6w,*`Q A-m65o FG ,(u eʲvRU1`ITDP'4w(5CkDcQeK """$< lS}O1ɌvOѧ MR*ŃΓE w=s:o9k~;)S ^}FG = մ8,ZgNiʕW caTE5) ;VLsBQ;ݿJ_!V?OS~0-Tj@q^tz]L#Z$Og9T_[A/nBq n]c7C)l!th.;Ά xp V)G`:!{4P3.t * }ɶ
YZ