Changelog for libmspack-devel-0.5-8.3.1.x86_64.rpm :
Fri Oct 26 14:00:00 2018 Marketa Calabkova
- Added patches:

* libmspack-resize-buffer.patch -- CAB block input buffer is one
byte too small for maximal Quantum block.

* libmspack-fix-bounds-checking.patch -- Fix off-by-one bounds
check on CHM PMGI/PMGL chunk numbers and reject empty filenames.

* libmspack-reject-blank-filenames.patch -- Avoid returning CHM
file entries that are \"blank\" because they have embedded null
bytes.

* libmspack-fix-test-install.patch -- Add anti \"../\" and leading slash
protection to chmextract (here chmx).
- Fixed bugs:

* CVE-2018-18584 (bsc#1113038)

* CVE-2018-18585 (bsc#1113039)

* CVE-2018-18586 (bsc#1113040)

Fri Feb 27 13:00:00 2015 sbrabecAATTsuse.cz
- Remove problematic libmspack-qtmd_decompress-loop.patch
(bnc#912214#c10).
Version 0.5 has a correct fix dated 2015-01-05.

Wed Feb 11 13:00:00 2015 p.drouandAATTgmail.com
- Update to version 0.5

* Please read the changelog; too many things to list

Tue Jan 20 13:00:00 2015 sbrabecAATTsuse.cz
- Fix possible infinite loop caused DoS (bnc912214, CVE-2014-9556,
libmspack-qtmd_decompress-loop.patch).

Fri Apr 4 14:00:00 2014 jengelhAATTinai.de
- Add baselibs.conf: wxWidgets-32bit depends on libmspack0-32bit

Mon Jun 24 14:00:00 2013 wernerAATTsuse.de
- Avoid Source URL for http://www.cabextract.org.uk/ as this does
not work

Sat Jun 22 14:00:00 2013 dimstarAATTopensuse.org
- Update to version 0.4alpha:
+ This release adds support for the Microsoft Exchange Offline
Address Book (OAB) format, both compressed and incremental
variants.

Wed Jul 18 14:00:00 2012 ajAATTsuse.de
- Remove autoreconf call and libtool buildrequires, they are not
needed anymore.

Wed Jul 18 14:00:00 2012 sbrabecAATTsuse.cz
- Update to version 0.3alpha:

* code cleanup and build system update

* handle corrupted cabinet files better

* handle special cases of cabinet files
- License update: LGPL-2.1 only.

Mon Feb 27 13:00:00 2012 cfarrellAATTsuse.com
- license update: LGPL-2.1+
No indication of GPL-2.0+ code in the package

Mon Feb 13 13:00:00 2012 cooloAATTsuse.com
- patch license to follow spdx.org standard

Sun Nov 20 13:00:00 2011 jengelhAATTmedozas.de
- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building

Sat Nov 19 13:00:00 2011 cooloAATTsuse.com
- add libtool as buildrequire to avoid implicit dependency

Wed Dec 22 13:00:00 2010 andreas.hankeAATTgmx-topmail.de
- update to version 0.2alpha (#660942):

* matches cabextract-1.3, fixing CVE-2010-2800 and CVE-2010-2801

* adds pkg-config support

* obsoletes half of libmspack-warnings.patch
- remove self-obsoletion
- drop -D_POSIX_SOURCE as it breaks the build with this version
- drop empty NEWS file