c_cpp/libmspack
SHA256
8
0
Fork 0
forked from pool/libmspack
Code Pull Requests Activity
Files
30e2f2408d939ef21d595cf27f1e4df2a51bb86ba4657ec409a37974ec0ee115
libmspack/libmspack.changes
Ismail Dönmez 30e2f2408d Accepting request 565794 from home:mnhauke:branches:devel:libraries:c_c++ 
- Update to version 0.6
   * read_spaninfo(): a CHM file can have no ResetTable and have a
   negative length in SpanInfo, which then feeds a negative output 
   length to lzxd_init(), which then sets frame_size to a value of
   your choosing, the lower 32 bits of output length, larger than 
   LZX_FRAME_SIZE. If the first LZX block is uncompressed, this
   writes data beyond the end of the window.
   This issue was raised by ClamAV as CVE-2017-6419.
   * lzxd_init(), lzxd_set_output_length(), mszipd_init(): due to the 
   issue mentioned above, these functions now reject negative lengths
   * cabd_read_string(): add missing error check on result of read().
   If an mspack_system implementation returns an error, it's
   interpreted as a huge positive integer, which leads to reading
   past the end of the stack-based buffer.
   This issue was raised by ClamAV as CVE-2017-11423
- Add subpackage for helper tools
- Run spec-cleaner

- Update to version 0.6

OBS-URL: https://build.opensuse.org/request/show/565794
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libmspack?expand=0&rev=26
2018-01-16 14:34:02 +00:00

154 lines
5.4 KiB
Plaintext
Raw Blame History

-------------------------------------------------------------------
Mon Jan 15 14:27:41 UTC 2018 - mardnh@gmx.de
- Update to version 0.6
* read_spaninfo(): a CHM file can have no ResetTable and have a
negative length in SpanInfo, which then feeds a negative output
length to lzxd_init(), which then sets frame_size to a value of
your choosing, the lower 32 bits of output length, larger than
LZX_FRAME_SIZE. If the first LZX block is uncompressed, this
writes data beyond the end of the window.
This issue was raised by ClamAV as CVE-2017-6419.
* lzxd_init(), lzxd_set_output_length(), mszipd_init(): due to the
issue mentioned above, these functions now reject negative lengths
* cabd_read_string(): add missing error check on result of read().
If an mspack_system implementation returns an error, it's
interpreted as a huge positive integer, which leads to reading
past the end of the stack-based buffer.
This issue was raised by ClamAV as CVE-2017-11423
- Add subpackage for helper tools
- Run spec-cleaner
-------------------------------------------------------------------
Mon Jan 15 14:08:39 UTC 2018 - mardnh@gmx.de
- Update to version 0.6
-------------------------------------------------------------------
Fri Feb 27 18:02:21 CET 2015 - sbrabec@suse.cz
- Remove problematic libmspack-qtmd_decompress-loop.patch
(bnc#912214#c10).
Version 0.5 has a correct fix dated 2015-01-05.
-------------------------------------------------------------------
Wed Feb 11 22:50:46 UTC 2015 - p.drouand@gmail.com
- Update to version 0.5
* Please read the changelog; too many things to list
-------------------------------------------------------------------
Tue Jan 20 18:12:19 CET 2015 - sbrabec@suse.cz
- Fix possible infinite loop caused DoS (bnc912214, CVE-2014-9556,
libmspack-qtmd_decompress-loop.patch).
-------------------------------------------------------------------
Fri Apr 4 08:58:51 UTC 2014 - jengelh@inai.de
- Add baselibs.conf: wxWidgets-32bit depends on libmspack0-32bit
-------------------------------------------------------------------
Mon Jun 24 10:13:52 UTC 2013 - werner@suse.de
- Avoid Source URL for http://www.cabextract.org.uk/ as this does
not work
-------------------------------------------------------------------
Sat Jun 22 17:08:46 UTC 2013 - dimstar@opensuse.org
- Update to version 0.4alpha:
+ This release adds support for the Microsoft Exchange Offline
Address Book (OAB) format, both compressed and incremental
variants.
-------------------------------------------------------------------
Wed Jul 18 18:35:42 UTC 2012 - aj@suse.de
- Remove autoreconf call and libtool buildrequires, they are not
needed anymore.
-------------------------------------------------------------------
Wed Jul 18 19:12:53 CEST 2012 - sbrabec@suse.cz
- Update to version 0.3alpha:
* code cleanup and build system update
* handle corrupted cabinet files better
* handle special cases of cabinet files
- License update: LGPL-2.1 only.
-------------------------------------------------------------------
Mon Feb 27 15:14:56 UTC 2012 - cfarrell@suse.com
- license update: LGPL-2.1+
No indication of GPL-2.0+ code in the package
-------------------------------------------------------------------
Mon Feb 13 10:48:55 UTC 2012 - coolo@suse.com
- patch license to follow spdx.org standard
-------------------------------------------------------------------
Sun Nov 20 20:44:56 UTC 2011 - jengelh@medozas.de
- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
-------------------------------------------------------------------
Sat Nov 19 20:42:31 UTC 2011 - coolo@suse.com
- add libtool as buildrequire to avoid implicit dependency
-------------------------------------------------------------------
Wed Dec 22 05:21:45 CET 2010 - andreas.hanke@gmx-topmail.de
- update to version 0.2alpha (#660942):
* matches cabextract-1.3, fixing CVE-2010-2800 and CVE-2010-2801
* adds pkg-config support
* obsoletes half of libmspack-warnings.patch
- remove self-obsoletion
- drop -D_POSIX_SOURCE as it breaks the build with this version
- drop empty NEWS file
-------------------------------------------------------------------
Tue Jan 15 17:30:34 CET 2008 - sbrabec@suse.cz
- Applied shared library packaging policy.
- Removed unneeded static library and .la file.
-------------------------------------------------------------------
Fri Oct 20 15:41:06 CEST 2006 - sbrabec@suse.cz
- Updated to version 0.0.20060920alpha:
* Bug fixes.
* Write an mspack_system implementation that can handle normal
disk files, open file handles, open file descriptors and raw
memory all at the same time.
* Added a program for dumping useful data from CHM files.
* Added a new test example which shows an mspack_system
implementation that reads and writes from memory only.
-------------------------------------------------------------------
Wed Jan 25 21:37:34 CET 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Mon Nov 22 11:59:08 CET 2004 - ro@suse.de
- "sed -i" does not work on older distributions
-------------------------------------------------------------------
Wed Apr 14 15:39:48 CEST 2004 - mcihar@suse.cz
- include some documentation
-------------------------------------------------------------------
Wed Apr 14 11:06:06 CEST 2004 - mcihar@suse.cz
- initial packaging
View Git Blame Copy Permalink