Changelog for
libmspack-devel-0.10.1-2.1.i586.rpm :
* Wed Mar 06 2019 Martin Hauke
- Update to version 0.10.1
* Bugfix release, no functional changes
* Mon Mar 04 2019 Martin Hauke - Update to version 0.10:
* Fix Heap buffer overflow in chmd_read_headers()
* Fix memory exhausted in chmd_read_headers()
* Fix memory exhausted in oabd_decompress()
* Wed Nov 07 2018 sbrabecAATTsuse.com- Update to version 0.9.1:
* Fix bug in decompressing data to get to the correct folder offset when the folder is LZX compressed (0.8 regression).
* Build system cleanup
* Testsuite available
* Does not install testing tools and examples by default.- Rename mspack-tools to mspack-examples to follow upstream change.
* Tue Oct 23 2018 sbrabecAATTsuse.com- Update to version 0.8:
* New parameter MSCABD_PARAM_SALVAGE which permits salvaging badly damaged files rather than rejecting them outright.
* Fix the above 38912-byte Quantum CAB block bug.
* Reject blank CHM filenames that are blank because they have embedded null bytes.
* chmextract: Protect from absolute/relative pathnames in CHM files.
* Mon Jul 30 2018 sbrabecAATTsuse.com- Update to version 0.7 (bsc#1103032):
* Fix 1 or 2 byte overwrite by bad KWAJ file header extensions (CVE-2018-14681).
* Fix 1 byte overread by character U+0100 in a CHM filename (CVE-2018-14682).
* Reject blank CHM filenames (CVE-2018-14680).
* Fix off-by-1 in CHM PMGI/PMGL chunk number validity checks, which could cause a crash (CVE-2018-14679).
* Fri Jan 19 2018 adam.majerAATTsuse.de- Correct mspack-tools group to Productivity/File utilities
* Tue Jan 16 2018 jengelhAATTinai.de- Correct SRPM group.
* Tue Jan 16 2018 mardnhAATTgmx.de- Fix typo
* Mon Jan 15 2018 mardnhAATTgmx.de- Update to version 0.6
* read_spaninfo(): a CHM file can have no ResetTable and have a negative length in SpanInfo, which then feeds a negative output length to lzxd_init(), which then sets frame_size to a value of your choosing, the lower 32 bits of output length, larger than LZX_FRAME_SIZE. If the first LZX block is uncompressed, this writes data beyond the end of the window. This issue was raised by ClamAV as CVE-2017-6419.
* lzxd_init(), lzxd_set_output_length(), mszipd_init(): due to the issue mentioned above, these functions now reject negative lengths
* cabd_read_string(): add missing error check on result of read(). If an mspack_system implementation returns an error, it\'s interpreted as a huge positive integer, which leads to reading past the end of the stack-based buffer. This issue was raised by ClamAV as CVE-2017-11423- Add subpackage for helper tools- Run spec-cleaner
* Fri Feb 27 2015 sbrabecAATTsuse.cz- Remove problematic libmspack-qtmd_decompress-loop.patch (bnc#912214#c10). Version 0.5 has a correct fix dated 2015-01-05.
* Wed Feb 11 2015 p.drouandAATTgmail.com- Update to version 0.5
* Please read the changelog; too many things to list
* Tue Jan 20 2015 sbrabecAATTsuse.cz- Fix possible infinite loop caused DoS (bnc912214, CVE-2014-9556, libmspack-qtmd_decompress-loop.patch).
* Fri Apr 04 2014 jengelhAATTinai.de- Add baselibs.conf: wxWidgets-32bit depends on libmspack0-32bit
* Mon Jun 24 2013 wernerAATTsuse.de- Avoid Source URL for http://www.cabextract.org.uk/ as this does not work
* Sat Jun 22 2013 dimstarAATTopensuse.org- Update to version 0.4alpha: + This release adds support for the Microsoft Exchange Offline Address Book (OAB) format, both compressed and incremental variants.
* Wed Jul 18 2012 ajAATTsuse.de- Remove autoreconf call and libtool buildrequires, they are not needed anymore.
* Wed Jul 18 2012 sbrabecAATTsuse.cz- Update to version 0.3alpha:
* code cleanup and build system update
* handle corrupted cabinet files better
* handle special cases of cabinet files- License update: LGPL-2.1 only.
* Mon Feb 27 2012 cfarrellAATTsuse.com- license update: LGPL-2.1+ No indication of GPL-2.0+ code in the package
* Mon Feb 13 2012 cooloAATTsuse.com- patch license to follow spdx.org standard
* Sun Nov 20 2011 jengelhAATTmedozas.de- Remove redundant/unwanted tags/section (cf. specfile guidelines)- Use %_smp_mflags for parallel building
* Sat Nov 19 2011 cooloAATTsuse.com- add libtool as buildrequire to avoid implicit dependency
* Wed Dec 22 2010 andreas.hankeAATTgmx-topmail.de- update to version 0.2alpha (#660942):
* matches cabextract-1.3, fixing CVE-2010-2800 and CVE-2010-2801
* adds pkg-config support
* obsoletes half of libmspack-warnings.patch- remove self-obsoletion- drop -D_POSIX_SOURCE as it breaks the build with this version- drop empty NEWS file
* Tue Jan 15 2008 sbrabecAATTsuse.cz- Applied shared library packaging policy.- Removed unneeded static library and .la file.
* Fri Oct 20 2006 sbrabecAATTsuse.cz- Updated to version 0.0.20060920alpha:
* Bug fixes.
* Write an mspack_system implementation that can handle normal disk files, open file handles, open file descriptors and raw memory all at the same time.
* Added a program for dumping useful data from CHM files.
* Added a new test example which shows an mspack_system implementation that reads and writes from memory only.
* Wed Jan 25 2006 mlsAATTsuse.de- converted neededforbuild to BuildRequires
* Mon Nov 22 2004 roAATTsuse.de- \"sed -i\" does not work on older distributions
* Wed Apr 14 2004 mciharAATTsuse.cz- include some documentation
* Wed Apr 14 2004 mciharAATTsuse.cz- initial packaging