libzzip-0-13-0.13.69-150000.3.17.1 < > , H ep9| [n\(Sm75x dM@a(Jw@19LȮqL31WKʸ - Mp+7 |#g_!
Pa6 iEG_&Nͷj=@IR^z3
=d5uQ9>$D/{}QLm utsA ++ƉkdN0ݎVdn:tnf8ƍ'˓v"¡V C > C ) ? ( d % = > D L
0
S $
( 8 9 H :
> @ B ) F 1 G L H I X Y ! Z !\ [ !` \ !x ] ! ^ #J b # c $6 d $ e $ f $ l $ u $ v % w ' x ( y (X z ( ( ( ( ( C libzzip-0-13 0.13.69 150000.3.17.1 ZIP compression library ZZipLib is a library for dealing with ZIP and ZIP-like archives by
using algorithms of zlib. eibs-power9-11 qSUSE Linux Enterprise 15 SUSE LLC LGPL-2.1+ https://www.suse.com/ System/Libraries http://zziplib.sourceforge.net linux ppc64le ` bA큤 eeeeeeeeeeeeeeeeeeZ5 f18cbd0546c3c74e6c5e604937306e4f829291a1fc17defa93bd2b2d4dfa074f be1dc81689369d30d277ee699bee4e381338d719d7810deb0ed58f99c7286cf6 45e840340a131beac1444532c35fbdbc371d162e1f60add7ab0fb5ecb23616f6 c986921bf54f9215f8a0a222e3fe48af654c12994d2b976f57896d979e566839 94b03f1a60a7fd5007149530626a895a6ef5a8b9342abfd56860c5f3956f5d23 libzzip-0.so.13 libzzip-0.so.13 libzzip-0.so.13 libzzip-0.so.13.0.69 libzzipfseeko-0.so.13 libzzipfseeko-0.so.13 libzzipfseeko-0.so.13 libzzipfseeko-0.so.13.0.69 libzzipmmapped-0.so.13 libzzipmmapped-0.so.13 libzzipmmapped-0.so.13 libzzipmmapped-0.so.13.0.69 libzzipwrap-0.so.13.0.69 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root zziplib-0.13.69-150000.3.17.1.src.rpm libzzip-0-13 libzzip-0-13(ppc-64) libzzip-0.so.13()(64bit) libzzipfseeko-0.so.13()(64bit) libzzipmmapped-0.so.13()(64bit) libzzipwrap-0.so.13()(64bit) zziplib @ @ @ @
/sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libz.so.1()(64bit) libzzip-0.so.13()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 e`@^]W]:[ [h@Z@Z@Z@Z@ZjZ$ZZyZtRZs@Zg#Zg#Y@XӸvalentin.lefebvre@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com avindra@opensuse.org adam.majer@suse.de jengelh@inai.de avindra@opensuse.org josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com tchvatal@suse.com tchvatal@suse.com mpluskal@suse.com josef.moellers@suse.com - assert full zzip_file_header.
[bsc#1214577, CVE-2020-18770, CVE-2020-18770.patch] - A recent upstream commit has introduced a regression:
The return value of the function ‘zzip_fread’ is a signed int
and "0" is a valid return value.
[bsc#1187526, CVE-2020-18442,
bsc1187526-fix-Incorrect-handling-of-function-zzip_fread-return-value.patch] - Make an unconditional error message conditional by checking
the return value of a function call.
[bsc1154002, bsc1154002-prevent-unnecessary-perror.patch] - Fixed another instance where division by 0 may occur.
[bsc#1129403, bsc1129403-prevent-division-by-zero.patch] - Prevent division by zero by first checking if uncompressed size
is 0. This may happen with directories which have a compressed
and uncompressed size of 0.
[bsc#1129403, bsc1129403-prevent-division-by-zero.patch] - Remove any "../" components from pathnames of extracted files.
[bsc#1110687, CVE-2018-17828, CVE-2018-17828.patch] - Avoid memory leak from __zzip_parse_root_directory().
Free allocated structure if its address is not passed back.
[bsc#1107424, CVE-2018-16548, CVE-2018-16548.patch] - Check if data from End of central directory record makes sense.
Especially the Offset of start of central directory must not
a) be negative or
b) point behind the end-of-file.
- Check if compressed size in Central directory file header
makes sense, i.e. the file's data does not extend beyond the
end of the file.
[bsc#1084517, CVE-2018-7726, CVE-2018-7726.patch,
bsc#1084519, CVE-2018-7725, CVE-2018-7725.patch] - Update to 0.13.69:
* fix a number of CVEs reported with special *.zip PoC files
* completing some doc strings while checking the new man-pages to
look good
* update refs to point to github instead of sf.net
* man-pages are generated with new dbk2man.py - docbook xmlto is
optional now
* a zip-program is still required for testing, but some errors
are gone when not present
- run spec-cleaner
- don't ship Windows only file, README.MSVC6 - Drop BR: fdupes since it does nothing. - Fix RPM groups. Remove ineffective --with-pic.
Trim redundancies from description.
Do not let fdupes run across partitions. - Update to 0.13.68:
* fix a number of CVEs reported with special *.zip files
* minor doc updates referencing GitHub instead of sf.net
- drop CVE-2018-6381.patch
* merged in a803559fa9194be895422ba3684cf6309b6bb598
- drop CVE-2018-6484.patch
* merged in 0c0c9256b0903f664bca25dd8d924211f81e01d3
- drop CVE-2018-6540.patch
* merged in 15b8c969df962a444dfa07b3d5bd4b27dc0dbba7
- drop CVE-2018-6542.patch
* merged in 938011cd60f5a8a2a16a49e5f317aca640cf4110 - Changed %license to %doc in SPEC file. - If the size of the central directory is too big, reject
the file.
Then, if loading the ZIP file fails, display an error message.
[CVE-2018-6542.patch, CVE-2018-6542, bsc#1079094] - If an extension block is too small to hold an extension,
do not use the information therein.
- If the End of central directory record (EOCD) contains an
Offset of start of central directory which is beyond the end of
the file, reject the file.
[CVE-2018-6540, bsc#1079096, CVE-2018-6540.patch] - Reject the ZIP file and report it as corrupt if the size of the
central directory and/or the offset of start of central directory
point beyond the end of the ZIP file.
[CVE-2018-6484, boo#1078701, CVE-2018-6484.patch] - If a file is uncompressed, compressed and uncompressed sizes
should be identical.
[CVE-2018-6381, bsc#1078497, CVE-2018-6381.patch] - Drop tests as they fail completely anyway, not finding lib needing
zip command, this should allow us to kill python dependency
- Also drop docs subdir avoiding python dependency for it
* The generated xmls were used for mans too but we shipped those
only in devel pkg and as such we will live without them - Version update to 0.13.67:
* Various fixes found by fuzzing
* Merged bellow patches
- Remove merged patches:
* zziplib-CVE-2017-5974.patch
* zziplib-CVE-2017-5975.patch
* zziplib-CVE-2017-5976.patch
* zziplib-CVE-2017-5978.patch
* zziplib-CVE-2017-5979.patch
* zziplib-CVE-2017-5981.patch
- Switch to github tarball as upstream seem no longer pull it to
sourceforge
- Remove no longer applying patch zziplib-unzipcat-NULL-name.patch
* The sourcecode was quite changed for this to work this way
anymore, lets hope this is fixed too - Packaking changes:
* Depend on python2 explicitly
* Cleanup with spec-cleaner - Several bugs fixed:
* heap-based buffer overflows
(bsc#1024517, CVE-2017-5974, zziplib-CVE-2017-5974.patch)
* check if "relative offset of local header" in "central
directory header" really points to a local header
(ZZIP_FILE_HEADER_MAGIC)
(bsc#1024528, CVE-2017-5975, zziplib-CVE-2017-5975.patch)
* protect against bad formatted data in extra blocks
(bsc#1024531, CVE-2017-5976, zziplib-CVE-2017-5976.patch)
* NULL pointer dereference in main (unzzipcat-mem.c)
(bsc#1024532, bsc#1024536, CVE-2017-5975,
zziplib-CVE-2017-5975.patch)
* protect against huge values of "extra field length"
in local file header and central file header
(bsc#1024533, CVE-2017-5978, zziplib-CVE-2017-5978.patch)
* clear ZZIP_ENTRY record before use.
(bsc#1024534, bsc#1024535, CVE-2017-5979, CVE-2017-5977,
zziplib-CVE-2017-5979.patch)
* prevent unzzipcat.c from trying to print a NULL name
(bsc#1024537, zziplib-unzipcat-NULL-name.patch)
* Replace assert() by going to error exit.
(bsc#1034539, CVE-2017-5981, zziplib-CVE-2017-5981.patch) /sbin/ldconfig /sbin/ldconfig zziplib ibs-power9-11 1709827221
0.13.69-150000.3.17.1 0.13.69-150000.3.17.1 0.13.69-150000.3.17.1 0.13.69-150000.3.17.1 libzzip-0.so.10 libzzip-0.so.11 libzzip-0.so.12 libzzip-0.so.13 libzzip-0.so.13.0.69 libzzipfseeko-0.so.10 libzzipfseeko-0.so.11 libzzipfseeko-0.so.12 libzzipfseeko-0.so.13 libzzipfseeko-0.so.13.0.69 libzzipmmapped-0.so.10 libzzipmmapped-0.so.11 libzzipmmapped-0.so.12 libzzipmmapped-0.so.13 libzzipmmapped-0.so.13.0.69 libzzipwrap-0.so.13 libzzipwrap-0.so.13.0.69 libzzip-0-13 COPYING.LIB /usr/lib64/ /usr/share/licenses/ /usr/share/licenses/libzzip-0-13/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:13903/SUSE_SLE-15_Update/c63c91594715fe1ff338d69a19d851b2-zziplib.SUSE_SLE-15_Update drpm xz 5 ppc64le-suse-linux ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ac33f3d102c9c6bcc4ab6e5e39f168a3eaf9fd1d, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4b98b88e8e57004522aca9591dd2f5f67edf94cf, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=641121d52632b9c841380846128176f6dd8d4c21, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=caabcc4d5958a9ce162d6949bae3846fcd5b0a41, stripped directory ASCII text P R R R P R R R P R R R P R R R q+v ΐ=:- utf-8 cad6268747419c0116d04d8ae225431329e08b09a0b8345b24ee819bc30f0303 ? 7zXZ
! t//_] "k%r=d5NmB on
(f Ϻ0f;GKt_cC >|Vi 1 +n\B93 #cĺџ jDv|?ݛnV;;z9mW'<{.SʮXg5u!ybu0qJR ڛ Ś#l !o.V\Ƽxcwnj]0؇OvY{O y"sY S=EcT /ت"lr/s&\] Dwp)X ]r-/Ã~H_?PD?' La ޡ.RV 3,$OhwwYo :46_VGqU "hyT <6^x䶔@FtCO.~Ilk H畀B~7=j | Ѱ`26]@Ǭ1/@ tZY M=Ž*^tV 2*F=5 ~qvoi$]NW1
[Ez, ʨS'$H䪅/*c a_Q_@k9y
Rx*='!G]6jzd]W+2;ɚc v}0ăx{@`G-M?U`CBZ~==\e hO4ڕj8B*Xm؞]_zOSΘ_{pg- J(3\HeVn ]I
5U,1 ]
-y,K +)!"7O;?M}f&kLb 2R
Rϑ t(U ɱru0ش '4 1fw5Y{zN
n E3&<}'_+K|[%vKZz:vP{1B7)(Iv`oz>`{Iy XSM P_.z@ 2,Ywi4q́815_ȭZj"Pص&<-grd xjX>n'} &2NO
Bt`[bYʯ%[ o?dvS; ``5cA2m$qpCs 1
<D~ԅI=G%lB1DP%Mm*;9;\ K~;gqӨN%|дjrEԵ(I,}2 V5} d AꁠMqhJ
xeٵ2^TvZ`Ir&h=lZo>J'
CjQ}2BA!GQ-Xr*e`J/l"˽Z7O v YvBNQہÉ`:^9PE POS8$/R *OeYݭqI@<$lLEdz[wd8 3rm rPoWِ' ,ze{BѬ%Q&0_K0,эvI"S?!;D t4ë_gϤ%LygnpT~#B<ʍ$IAir:٣HfI<"|#tKsPC7 4
u?VC YI$> G( Ye Îbh5O7 MtIcw qJ:]y U4P:A1e YI=VivA/*7}:\1r.n.h%Ge L\Įf>Ǧ~k"UΠɯ'>@i*s;U:whe~d)!N
E30ƳT p*]11i$ja'Z M&A¢%ϺҐ?7>zW&%;m6vC] Wۥ^>1ıfPx ⷂ^)76{⮭MFP.%| d Ƽi 3h?ujun퇎ǷLt *דhov_|:mwhXrf鲁\ \ VKR)"vIBy4MU'=C[7<#`9e -H( & ̀"5Xo;8 ,
ܧUЛ!73͏e呚 )zwTHVU ˆ!-5 `)_hM*t%U0
Y
VH y>>YuǥPev0\Q<~o_IO%r !6[^`P ?:.NW1 l `
]Dz k[OQԿeVx/s"E, r?pͽ)"I=dYB6TM[G
"0 7S#>d
~+R!>gW~MyĜE&QnՏR=U= {
&%On! G1$|TG71ܑEWI2sDnH R&0k^m Q2 f^`-cf (`o0'|WmIr-Я
fJ t'AP}GZLI Z.m\E[,[tdr\DyX B564'jY]rJpó( Mϭdw$ KC1Z*].o:Lj"ď PfxN) (MkUp4Ƭjz>/'m]F'nn.K<\PIp&a4J0ѹN;-WDH93+7#`Z 1Kj)#Kn<%Bх< A(.U埳5Tv72|ZNwhI̛zyЧS=T"p\V +u)%-k=FT>uD+wi5TP ǿrf@F^&#za'beEηYɚQ\͒6ϑr: A#$kFp/\GF ,
ge-s.(8o O!^IxCE2ǹC8| ԂtNc@lq