libzzip-0-13-0.13.69-150000.3.17.1 < > , U e p9| f&Q!
}z䦳'dho! 8:AV]Cص87=Zlez&H|U^_F
h2 #0Aau0MF&Bc1SY"ڀٿ)y
иb'iQ#a^vWϑeU:km!On\ "ѧδSh^`ogzۅJ.s"
fh~ *3319?LS > C )0 ? ) d % =
: @ H
,
O ( = 8 D 9 :
n > [ @ j B y F G H I !0 X !D Y !` Z ! [ ! \ ! ] " ^ # b # c $ d $ e % f % l % u % v %h w ' x ( y (` z ( ( ( ( ) C libzzip-0-13 0.13.69 150000.3.17.1 ZIP compression library ZZipLib is a library for dealing with ZIP and ZIP-like archives by
using algorithms of zlib. e h02-armsrv3 qSUSE Linux Enterprise 15 SUSE LLC LGPL-2.1+ https://www.suse.com/ System/Libraries http://zziplib.sourceforge.net linux aarch64 0 bA큤 eeeeeeeeeeeeeeeeeeZ5 4e0275e070f24b61d660421a96f3020d7db0827b160e393fdc0861ea42c2a5b5 74b99cf6944a1d04c19073f9373f9ad5544f3db822dcad648f03499d65101859 d7cc4f88c534644fe077f2c824fb73259c8853a39c304c9133ac6983abb64862 8fbc88a4962b177060295cd27f519dbe7cec246be81dbeec56286ff8343bd121 94b03f1a60a7fd5007149530626a895a6ef5a8b9342abfd56860c5f3956f5d23 libzzip-0.so.13 libzzip-0.so.13 libzzip-0.so.13 libzzip-0.so.13.0.69 libzzipfseeko-0.so.13 libzzipfseeko-0.so.13 libzzipfseeko-0.so.13 libzzipfseeko-0.so.13.0.69 libzzipmmapped-0.so.13 libzzipmmapped-0.so.13 libzzipmmapped-0.so.13 libzzipmmapped-0.so.13.0.69 libzzipwrap-0.so.13.0.69 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root zziplib-0.13.69-150000.3.17.1.src.rpm libzzip-0-13 libzzip-0-13(aarch-64) libzzip-0.so.13()(64bit) libzzipfseeko-0.so.13()(64bit) libzzipmmapped-0.so.13()(64bit) libzzipwrap-0.so.13()(64bit) zziplib @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libz.so.1()(64bit) libzzip-0.so.13()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 e`@^]W]:[ [h@Z@Z@Z@Z@ZjZ$ZZyZtRZs@Zg#Zg#Y@XӸvalentin.lefebvre@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com avindra@opensuse.org adam.majer@suse.de jengelh@inai.de avindra@opensuse.org josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com tchvatal@suse.com tchvatal@suse.com mpluskal@suse.com josef.moellers@suse.com - assert full zzip_file_header.
[bsc#1214577, CVE-2020-18770, CVE-2020-18770.patch] - A recent upstream commit has introduced a regression:
The return value of the function ‘zzip_fread’ is a signed int
and "0" is a valid return value.
[bsc#1187526, CVE-2020-18442,
bsc1187526-fix-Incorrect-handling-of-function-zzip_fread-return-value.patch] - Make an unconditional error message conditional by checking
the return value of a function call.
[bsc1154002, bsc1154002-prevent-unnecessary-perror.patch] - Fixed another instance where division by 0 may occur.
[bsc#1129403, bsc1129403-prevent-division-by-zero.patch] - Prevent division by zero by first checking if uncompressed size
is 0. This may happen with directories which have a compressed
and uncompressed size of 0.
[bsc#1129403, bsc1129403-prevent-division-by-zero.patch] - Remove any "../" components from pathnames of extracted files.
[bsc#1110687, CVE-2018-17828, CVE-2018-17828.patch] - Avoid memory leak from __zzip_parse_root_directory().
Free allocated structure if its address is not passed back.
[bsc#1107424, CVE-2018-16548, CVE-2018-16548.patch] - Check if data from End of central directory record makes sense.
Especially the Offset of start of central directory must not
a) be negative or
b) point behind the end-of-file.
- Check if compressed size in Central directory file header
makes sense, i.e. the file's data does not extend beyond the
end of the file.
[bsc#1084517, CVE-2018-7726, CVE-2018-7726.patch,
bsc#1084519, CVE-2018-7725, CVE-2018-7725.patch] - Update to 0.13.69:
* fix a number of CVEs reported with special *.zip PoC files
* completing some doc strings while checking the new man-pages to
look good
* update refs to point to github instead of sf.net
* man-pages are generated with new dbk2man.py - docbook xmlto is
optional now
* a zip-program is still required for testing, but some errors
are gone when not present
- run spec-cleaner
- don't ship Windows only file, README.MSVC6 - Drop BR: fdupes since it does nothing. - Fix RPM groups. Remove ineffective --with-pic.
Trim redundancies from description.
Do not let fdupes run across partitions. - Update to 0.13.68:
* fix a number of CVEs reported with special *.zip files
* minor doc updates referencing GitHub instead of sf.net
- drop CVE-2018-6381.patch
* merged in a803559fa9194be895422ba3684cf6309b6bb598
- drop CVE-2018-6484.patch
* merged in 0c0c9256b0903f664bca25dd8d924211f81e01d3
- drop CVE-2018-6540.patch
* merged in 15b8c969df962a444dfa07b3d5bd4b27dc0dbba7
- drop CVE-2018-6542.patch
* merged in 938011cd60f5a8a2a16a49e5f317aca640cf4110 - Changed %license to %doc in SPEC file. - If the size of the central directory is too big, reject
the file.
Then, if loading the ZIP file fails, display an error message.
[CVE-2018-6542.patch, CVE-2018-6542, bsc#1079094] - If an extension block is too small to hold an extension,
do not use the information therein.
- If the End of central directory record (EOCD) contains an
Offset of start of central directory which is beyond the end of
the file, reject the file.
[CVE-2018-6540, bsc#1079096, CVE-2018-6540.patch] - Reject the ZIP file and report it as corrupt if the size of the
central directory and/or the offset of start of central directory
point beyond the end of the ZIP file.
[CVE-2018-6484, boo#1078701, CVE-2018-6484.patch] - If a file is uncompressed, compressed and uncompressed sizes
should be identical.
[CVE-2018-6381, bsc#1078497, CVE-2018-6381.patch] - Drop tests as they fail completely anyway, not finding lib needing
zip command, this should allow us to kill python dependency
- Also drop docs subdir avoiding python dependency for it
* The generated xmls were used for mans too but we shipped those
only in devel pkg and as such we will live without them - Version update to 0.13.67:
* Various fixes found by fuzzing
* Merged bellow patches
- Remove merged patches:
* zziplib-CVE-2017-5974.patch
* zziplib-CVE-2017-5975.patch
* zziplib-CVE-2017-5976.patch
* zziplib-CVE-2017-5978.patch
* zziplib-CVE-2017-5979.patch
* zziplib-CVE-2017-5981.patch
- Switch to github tarball as upstream seem no longer pull it to
sourceforge
- Remove no longer applying patch zziplib-unzipcat-NULL-name.patch
* The sourcecode was quite changed for this to work this way
anymore, lets hope this is fixed too - Packaking changes:
* Depend on python2 explicitly
* Cleanup with spec-cleaner - Several bugs fixed:
* heap-based buffer overflows
(bsc#1024517, CVE-2017-5974, zziplib-CVE-2017-5974.patch)
* check if "relative offset of local header" in "central
directory header" really points to a local header
(ZZIP_FILE_HEADER_MAGIC)
(bsc#1024528, CVE-2017-5975, zziplib-CVE-2017-5975.patch)
* protect against bad formatted data in extra blocks
(bsc#1024531, CVE-2017-5976, zziplib-CVE-2017-5976.patch)
* NULL pointer dereference in main (unzzipcat-mem.c)
(bsc#1024532, bsc#1024536, CVE-2017-5975,
zziplib-CVE-2017-5975.patch)
* protect against huge values of "extra field length"
in local file header and central file header
(bsc#1024533, CVE-2017-5978, zziplib-CVE-2017-5978.patch)
* clear ZZIP_ENTRY record before use.
(bsc#1024534, bsc#1024535, CVE-2017-5979, CVE-2017-5977,
zziplib-CVE-2017-5979.patch)
* prevent unzzipcat.c from trying to print a NULL name
(bsc#1024537, zziplib-unzipcat-NULL-name.patch)
* Replace assert() by going to error exit.
(bsc#1034539, CVE-2017-5981, zziplib-CVE-2017-5981.patch) /sbin/ldconfig /sbin/ldconfig zziplib h02-armsrv3 1709827100
0.13.69-150000.3.17.1 0.13.69-150000.3.17.1 0.13.69-150000.3.17.1 0.13.69-150000.3.17.1 libzzip-0.so.10 libzzip-0.so.11 libzzip-0.so.12 libzzip-0.so.13 libzzip-0.so.13.0.69 libzzipfseeko-0.so.10 libzzipfseeko-0.so.11 libzzipfseeko-0.so.12 libzzipfseeko-0.so.13 libzzipfseeko-0.so.13.0.69 libzzipmmapped-0.so.10 libzzipmmapped-0.so.11 libzzipmmapped-0.so.12 libzzipmmapped-0.so.13 libzzipmmapped-0.so.13.0.69 libzzipwrap-0.so.13 libzzipwrap-0.so.13.0.69 libzzip-0-13 COPYING.LIB /usr/lib64/ /usr/share/licenses/ /usr/share/licenses/libzzip-0-13/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:13903/SUSE_SLE-15_Update/c63c91594715fe1ff338d69a19d851b2-zziplib.SUSE_SLE-15_Update drpm xz 5 aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3ff3dfafd6f6b817e1b0b9583200725054c5ec19, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f0cfee6984ab61eed2f433f9a60415870a1bd11e, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a34d5693caf22c8510d315d6358b73e708152ec7, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=eb6a253cd8e5d0173b8e78c96bf5e65641ea1f75, stripped directory ASCII text P R R R R R P R R R R R P R R R R R P R R R R R
oNAg a utf-8 980460c0cc335cb8373dfcc8560f0f1b3cb2821b20c611142a851ad85aa22e41 ? 7zXZ
! t/C'] "k%r=d5NmB onqjkޠS>4ޞ 5k/ ` ܁C;.6r U&ZhB a>8$ $^1Ǜ I5Z&9x>bVe;Ʀ"%%HuJAÕ u ۹X^?UlB-% }5U)YS0z8ѩ1:Z :Kq>vayP%OlZ]>-,)=TWK&Vk,Aϭ )C/cli&ctqXm_ FH<\ )ezN~&M &<0!XVd?䷼r2*+OÎ
MZw:fkd}:L))G0 vEF"5ødCp~4@9-uXEm#DN7FBS>uhT'+ _ȴܴu&G t?vJ& 7W#\KOTZo/ka3=;I1RULPrID T?KͭEJ7< AMr" AMa|%U01 }ڨ(ˊ {<_hMAPkW%+PP6*r#5|o>E;
"r07bq Ԑ뱬*0ȗ$0N6ک*qݹ:RڦzSng1@;AӺ3VJW]
VW%-%D<1q4i [ď7ԕ0h!Wwp̳q?>1y+5p<'EWpزO*Ȯ{EK:5EG%m L
#?MemC`|5Ac/`g,h<uNٳ@jѢMd ^YPLNmׄz0}8b"t#ͦF7_9kHPvX O'e^VcBrW >";YPS"5Ә
m pA#5~pva'~J!(Va?1;ڿES.yWO 4 &w:E^5Hcj?.][b3KaAid*,i5 aY "⨪ ..3J)Qq;^7<UyH Fu]txQ<@L%Q63ݹ8
WEc@%8Q)猥ߺf~Od|jÜv4 GjG</Z#;{+)z.`CKqSh G^2:sO+ |߀~`rsV.ꥤ/џnO m
2,J~}}ADLRK&G_\L L;3kI- K3+
/?)ߐ' ?W|.$",]/Oeѻ5QnS\k.[lku]z> m-GUAG UqvV[%p:@QFu~r4BnG (ش (9ҧfh?o8!aW)R+ ]↜d3ä?{26C,r_"H6\2p4lIdQ- m#
U@$ sFziG'R6|]AU6"mѹ$rKRZv_bj!ϒ#}Giz1 t"8
У.}8 _1l`{ko*r7!lE-nex%o+hUPR U|K[ Y[ blX67;fW氦cs SCE:|AZ, %4pKJSLMV@p:#lu2 n%
Ġ$h}"f? #}
ʥYeT#sԵY@UDS EHI QApR ĀḶ7$,@1!̢3
\=CP5˺۽ o(;ޅR6g;d˨@~ge. >?ٍ&>f(j+{*wd~:s( ܞCgQpA4˸)hLczާ w\.J g +5zi.J 0vyS5'Jqu_#MdC'۹Ylg BGPA(`i":|ȴYId3k zAU( $gZlChlQgzލZwnɜs_g W4tޞw_R i.R,K?2*?ZqD'sGq=\,Z.=/?˸`@ $~vsnsHG Z0h0kQˢ͕(Z~p;ƹ0}^ek{v<2{ɈfI H~
([ i&0c5f]w%;{a# KyL&,S(E>p+}[O:УAD(TE$>[S wFJ,7hbLޟ86~7RWٻ{ zF w((}N9|/ y}l|~o@HX>Enc'~#`MM1xe&QJa4MYg!dsnQ$l͓z%1,ϻMom VPsmjl8侓 &^ F*Нog)D?`R7{mVSv`.cۗ0;DɅ0N;G1 g@CwVj_26A%i6h& Up]NƗs(`yJ?9 0 *:^D榤qݺ2e
IyFe2꿠\~:}:! NՠD7QAT0E[[vs9fU\#]! JA 羚z>C RZAxX# O`eMG%7J}NPnX89]L[Ϟ*rY=?LX_R#K8&W C kV`T榀:YXw-E_cv;GqcSwp8g arh!+Ѭk~`IMT͌j+em'
% NRTj[.rPU.4qfy~@2zi2cp@t#5
uc^{vL7#:wh˥!\=졆 I^* G/=yW4v.ݶbu#J^ @g?H]{svPrHh毱[SjvN i O!XL7d&{HVm1vz0UR" ߐ- m+ k t\x0kgockכF&{c;܃
噲 hBmr/yU aq0LZMg m+? pX\T%TtIkܣ5"C vov
% }xcDD4D2# Q=PΟwߎqLS
0 .-HA]bRQk+ *YN<$%Z犝d wZm#(1iY9vi|ԎD c٫bT$x=႟I[h{ 8|@X6%>#C# ' 7(X1&k$IҽS;cGطO=>irr$ F[6f˺=)?hB X;g,ǔ6ߓ@QZ% j6a]`?Gah}҅կ|JPͶ?ŵϭdO0AzM&fF_@iQl%rg&2TM&R9=Fۀ;WG:]ʡGg~eE LQH Vbl H`mUSqojӳ Tx-릙=jO: h] '0sw,l]2 dBIϷ)t9}S%bI:8g8ᖕ'cs}+ŻTyPQTZDD0 rsY,328fc38^DNdI9#C
W o=o]Xut(X|upB ܍'] >M"iHTb$;EV2;wmw:x_dGl Ȣsq<`gܡI3kegdJN#[:F>%:kK]ƨ:HїwpD cia aɼն#X*/KSZ oԊ qn
kH~tP` l82Vȋc0iV
idd;0Q-8:@K]+Vg( KQ|r<@A;-抑35-o@JOH(!L[(y s76i?g\]
l
!3 q;P 8h
|0pRv]:dC6*Y̓hh19p"{ ݴo3ֹ)GCٞϼ.p كS|Nn-Bgu0%dH:$'E ? \j!f](OsR=)f"yQhIdi\:ax'<3֎HĦu⻂zO J +RJMZHm~sbɉH@&GYrekOZjNîf [Y )nd 5.{X0
[G,í氖N3gz(kX}!dd/G<\Vx6klm/V!|+"
)j;-o:@d͍<@}TM*;zQj+!ņY1%
R"{gw[xV*gITW¤P0 Hzv 'fֱ̒ܡ}ڙ3Lu,sEnGq. x;'qѡbfM
גC(RQ ^8@ĘKR%wL$Pk8@()h` U}&KO43 4[ $,O}#7U#.]h%5JpDc l\/-Bȷxْtu1Oc+:kѼSQLp8x(])Pu\f rGm
GQv`={';
pY\cC<68/r=XqLu'2th53?tioyd ~(
!&AQ!p00X/ciuﲪDf vPHQ*'0!Ù 6H)1> l?Sؽ !JRTe*bv`5FL괜;ݲȧ vD(a gaͿZNӏBT{ޗ'Ix j d)@ȁGF<3qp
w]biT JI>w2u7O/v-v8K";J _:˥²68~H\Np-=F<0`dsZLQ:]
ȿȘN5%a<_կn}L2/NY%<)kyN/,CϠ-,^S[iD'2#WO6*.^`Ɔ }$ + ˊFcJ,\0C=Z:gi^*}yQ0^#[;?u+ap>>݁08Z-7FW]DJ3r8J.eWa^װͳ Oh5?ew* sSEтu%H(AXq1 8B",}q|<^GmmO
Γ}6#ݔ d1Ur~^dכH;{A[Ҩ'n5e5 b`H"|o Qs4n>a?fűuko:qEC{DjM,
T}YFlYCّ>E_ f>
BeE0MgzTH usNE4",3Gy`MM2j3Xd'Rw&J 7Ѿ"!1lr7ǂUF 32몜]F E 3y
xZ 7$ 7$蟛[ ZVT0 [V} ~uZe?*7G1 -p5VQ#
«,_.<9Hqm CljcTYBK-yx68 3XMv㰵z$'-ي0Aا]er}?jDlCQJd 6(B WAZF @95NԢ ~xlHzF= b η špٚkǪ?0sʵiFiLt)'LwM лs=@Ipf!/=&*g Sj
68f\JT]J :su"49 taQ~R8Nֳn1ZP3yŚ*͖[rQOZĶ ũOlEY>?h[pE25Q1Ry]'
H,)G mXa5[ļ
zeЙ) Ϛe\DC LT-XzBMhJY0J[[Ψ4
'VՈt_ ό-6ro! AB)
ꗅ͋P5&LQg:OgࠚCl =gf{1Mgex XI{7:Łj#.k5
= یfrZBuTˁz:u;VU <_A ^-ݳ y*Pۑ ;k:x@FS?WBxUPx9i
2ʷ+nA/*TjIvGgǕ؇#l 3 EHm_#"KmCm9HX(7)j L[͆ +9X+*j%ȟkm =l1ڮk-&Y>Bs50ocH6QB\R"H &DsOMyLLmdJf54GGIa?WJ4P8I%Ѹ7J(Zπe ]T\$JC+)@-s'C!y|hC"ͳ+%:}_]ӍOH'o%9|Qr k5@vJ ($8Vs4:M\$Qik=,'vSq.Rzz=@Sl_22 $j9^6^hG vsVixlCOi^ uiB1)ۻKI? v72tqCLA1ָi
'U
[ P
YZ