Changelog for
libmspack-devel-0.11-3.2.i586.rpm :
* Mon Jan 22 2024 Danilo Spinella
- The following bugs and CVEs are not affecting TW:
* CVE-2018-18584
* CVE-2018-18585
* CVE-2018-18586
* CVE-2019-1010305
* bsc#1113038
* bsc#1113039
* bsc#1113040
* bsc#1130489
* bsc#1141680
* Mon Feb 06 2023 Paolo Stivanin - Update to version 0.11:
* see https://github.com/kyz/libmspack/blob/master/libmspack/ChangeLog for a full changelog
* Wed Mar 06 2019 Martin Hauke - Update to version 0.10.1
* Bugfix release, no functional changes
* Mon Mar 04 2019 Martin Hauke - Update to version 0.10:
* Fix Heap buffer overflow in chmd_read_headers()
* Fix memory exhausted in chmd_read_headers()
* Fix memory exhausted in oabd_decompress()
* Wed Nov 07 2018 sbrabecAATTsuse.com- Update to version 0.9.1:
* Fix bug in decompressing data to get to the correct folder offset when the folder is LZX compressed (0.8 regression).
* Build system cleanup
* Testsuite available
* Does not install testing tools and examples by default.- Rename mspack-tools to mspack-examples to follow upstream change.
* Tue Oct 23 2018 sbrabecAATTsuse.com- Update to version 0.8:
* New parameter MSCABD_PARAM_SALVAGE which permits salvaging badly damaged files rather than rejecting them outright.
* Fix the above 38912-byte Quantum CAB block bug.
* Reject blank CHM filenames that are blank because they have embedded null bytes.
* chmextract: Protect from absolute/relative pathnames in CHM files.
* Mon Jul 30 2018 sbrabecAATTsuse.com- Update to version 0.7 (bsc#1103032):
* Fix 1 or 2 byte overwrite by bad KWAJ file header extensions (CVE-2018-14681).
* Fix 1 byte overread by character U+0100 in a CHM filename (CVE-2018-14682).
* Reject blank CHM filenames (CVE-2018-14680).
* Fix off-by-1 in CHM PMGI/PMGL chunk number validity checks, which could cause a crash (CVE-2018-14679).
* Fri Jan 19 2018 adam.majerAATTsuse.de- Correct mspack-tools group to Productivity/File utilities
* Tue Jan 16 2018 jengelhAATTinai.de- Correct SRPM group.
* Tue Jan 16 2018 mardnhAATTgmx.de- Fix typo
