zziplib-devel-0.13.69-150000.3.20.1 < > , K f%p9|XthzS:L12}Raipn]-!j 2@wY2.mH2 Lv6ۈd"7ܺNs<لL*Dc1˱uUH۵8-i:ŕ!c8-0D&o@X(Ffmh5Nve0z!#Vu.yBQ^iQcہQbN::ӥ 6l7TY2"k& F_i}z+G>銆9iz}T"U > > @ ? @ d & _ : Y _ h 0 ( 0 0
0 0 X 0
0 0 0 0 t P ( & 8 0 9 : y F - G . 0 H . 0 I / 0 X / Y / \ 04 0 ] 0 0 ^ 2 b 3m c 4 d 4 e 4 f 4 l 4 u 4 0 v 5p w = 0 x > 0 y ?| < z @l @| @ @ @ C zziplib-devel 0.13.69 150000.3.20.1 Development files for zziplib, a ZIP compression library That are the header files needed for developing applications using
ZZipLib. f%h04-armsrv2
!SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1+ https://www.suse.com/ Development/Libraries/C and C++ http://zziplib.sourceforge.net linux aarch64 8 h p k ] N i " 7
} F 8 ) " !| 4
A큤A큤 f$f$f$f$f$f$f$f$f$f$f$f#f#f#f#f#f#f#f#f#f#f#f#f#f#f#f#f#f$f#f#f#f#f#f#f#f$f#f#f#f#f$f$f$Z5Z5Z5Z5d8d2830059fdebac9594d835f933bffe344052866cbc0dd5f1adf6680c3f7803 5be3136c556a2610a3f26139eda62d76042263da15d88b15b89ae7d16ea491ba 19123576acba45cfaab8789d7e0076ae4e3fdaa2d0b81eeff5a5cde1c16f246b d13d1aa3888cacb6fab76b1d5e97c823828f4bcde2d327af8d20a1bf2d10e55b 277cdd78770f9778f5a2cf5996cd5546b2fec5bce913ddf3d64bcbfb13995f6d afb8e41f5f424c2e6effd8c1199f46907cc6392907d721486aa7e79731d03cab 545843d831ddc3c4a016b920fb813b9a8a5f61ac6b645bcc91765f524b355c4c deb17ddf7f2ae5b1804bfd65423aca1ec709ba263de2f55a635c8c284aa79d51 863cbaceca6284eb0a6edf1cc37bb917183c110cfcc0fafcba529ddd604d3cef 20368f2221a7ac4f4136cac6c48a65b1d0fdde06f14d281752fa2e2a5b62d5c6 ac0e5a9e840ddf42c1bdd4548e1e621835d5bc1472b37efc680d3ed4fc29623e 9399427ea91d1dba3717dc23f10ecb215f2c38dd66e84e2b63855082cdeb0c8b 431dd66023da143e5893b942ac5ffcc03360fcd91aeee7ee89e90b1551992297 6f869eda4b8bd6c31fd4a0615721026a26d4aedfa7d5c4770ca918da4605d9d5 c1b5a4ccf235c40c04846ff74447910f411cb708c750e2f05470865d8308ea63 a96811afd4d7005eb38f061ec9286882de5ef7690d6aa9fe319a3d3fe3ad5ec5 fc024b151bf0625c32f7c68acbd48595dc50eeb384cf9f125012a309826719bc 91edbf67e946e23094ed5ed7f192b74e256984d25526ba75d1ac8f9da60d1115 4211a35936e905742f75d922e55b22af15ffafb967a6b232df3e28f9b59927d9 f5758bc325de855ad461bcb3592f33e0699f5f2469368a08a90a3b8f60d9d4aa e7e28ad7a44508b15af0f974a251092230bcb0f8a2c8eeda64cf452a4fd7569b 21429dbd83226c7dec93ae8ddb56c2fe9788caf1aed0023dc5b778be0f1f2b09 90f725d4225053ff8982ff9d2e9ad427ee6def3cfd4971ff1db04cfb5a71b6cf a448a9444259340336912ca028f6e66e34062a50a974b462568cdbe47cd096b6 879ecf2d72d34875254b7811dc76db70f5eb7b7102fb263784c321b0f1f9dcc9 438ea96242dcb839044595f564c611b5918519dfca54a8f41c0140bacc2a518e 84995c0ae570c227a38b3bd3c57c82fa0e7153e3e6c1ab871bdb7bc288491fbb a6e90361fcf8d2de64f4d072b69b9c7a7a43dced8971f12ab90efe47628c63ee 909c79ae082e2c107c7b6eb4471d15992a19979c327c66393502bee00ebd7e86 f3fe75bf76287c5b8b005516859a0afc06e89b88e05b9ae9d0aad39984139231 62d8b9daa4b5977029cffaac4742a21a192fd5af2e50c6342034e1d6024e7312 57074e56448d4add4a88e47c8291b5edb33d609e5246e2ce09e672fba8eeea1e 14a4164dc4e99a39406c0a85a7d398133cb0c18a1e13e34888ad509dff463a1f 8b4d3b44fd2c93005aa703f3986f49e70e8ada2b0c049997f138191d74e2e7c5 535af3217718876c176a83462e5c1bd7c2fb96108f1ede13648f4d3442c221ee 578f10157a4d2eccbebe05b565d3d05cd56c42ffa9f3ef4ee615811dffd3c5dd 1e02156d70bb8273560bc93f08649b98cc78fd7cde79775d419f1de1c6d428ef 93b72ddd676c5d9a61655d6139f25bb9f422a49a08d69182bfedd654873a166b bef2b7b06f6eb72626dda7efd1a03629651645e0ff98da99443ecefada18aa9e eb92020572a460079f998e343f7d622276f41e3a7853e6de0558ddfdfa795c8a 144b1d4d8aac86ec4829c07897f42749c54321ab5d4e5c8a146d8733aa696368 9d9ff9b30a51ff29a6c69ca9a75c178ed2024828f25876ddba0ef5ff803b2027 libzzip-0.so.13.0.69 libzzipfseeko-0.so.13.0.69 libzzipmmapped-0.so.13.0.69 libzzipwrap-0.so.13.0.69 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root zziplib-0.13.69-150000.3.20.1.src.rpm pkgconfig(zzip-zlib-config) pkgconfig(zzipfseeko) pkgconfig(zziplib) pkgconfig(zzipmmapped) pkgconfig(zzipwrap) zziplib-devel zziplib-devel(aarch-64) @ @ @ @ @ @ @ @ @ @ @
/usr/bin/pkg-config ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libz.so.1()(64bit) libzzip-0-13 libzzip-0.so.13()(64bit) libzzipfseeko-0.so.13()(64bit) libzzipmmapped-0.so.13()(64bit) pkgconfig(zlib) pkgconfig(zzip-zlib-config) pkgconfig(zziplib) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 0.13.69 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 f@e`@^]W]:[ [h@Z@Z@Z@Z@ZjZ$ZZyZtRZs@Zg#Zg#Y@XӸvalentin.lefebvre@suse.com valentin.lefebvre@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com avindra@opensuse.org adam.majer@suse.de jengelh@inai.de avindra@opensuse.org josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com tchvatal@suse.com tchvatal@suse.com mpluskal@suse.com josef.moellers@suse.com - fetch_disk_trailer: Don't truncate the size verif.
[bsc#1227178, CVE-2024-39134,
bsc1227178-fetch_disk_trailer-Don-t-truncate-the-size-verif.patch - assert full zzip_file_header.
[bsc#1214577, CVE-2020-18770, CVE-2020-18770.patch] - A recent upstream commit has introduced a regression:
The return value of the function ‘zzip_fread’ is a signed int
and "0" is a valid return value.
[bsc#1187526, CVE-2020-18442,
bsc1187526-fix-Incorrect-handling-of-function-zzip_fread-return-value.patch] - Make an unconditional error message conditional by checking
the return value of a function call.
[bsc1154002, bsc1154002-prevent-unnecessary-perror.patch] - Fixed another instance where division by 0 may occur.
[bsc#1129403, bsc1129403-prevent-division-by-zero.patch] - Prevent division by zero by first checking if uncompressed size
is 0. This may happen with directories which have a compressed
and uncompressed size of 0.
[bsc#1129403, bsc1129403-prevent-division-by-zero.patch] - Remove any "../" components from pathnames of extracted files.
[bsc#1110687, CVE-2018-17828, CVE-2018-17828.patch] - Avoid memory leak from __zzip_parse_root_directory().
Free allocated structure if its address is not passed back.
[bsc#1107424, CVE-2018-16548, CVE-2018-16548.patch] - Check if data from End of central directory record makes sense.
Especially the Offset of start of central directory must not
a) be negative or
b) point behind the end-of-file.
- Check if compressed size in Central directory file header
makes sense, i.e. the file's data does not extend beyond the
end of the file.
[bsc#1084517, CVE-2018-7726, CVE-2018-7726.patch,
bsc#1084519, CVE-2018-7725, CVE-2018-7725.patch] - Update to 0.13.69:
* fix a number of CVEs reported with special *.zip PoC files
* completing some doc strings while checking the new man-pages to
look good
* update refs to point to github instead of sf.net
* man-pages are generated with new dbk2man.py - docbook xmlto is
optional now
* a zip-program is still required for testing, but some errors
are gone when not present
- run spec-cleaner
- don't ship Windows only file, README.MSVC6 - Drop BR: fdupes since it does nothing. - Fix RPM groups. Remove ineffective --with-pic.
Trim redundancies from description.
Do not let fdupes run across partitions. - Update to 0.13.68:
* fix a number of CVEs reported with special *.zip files
* minor doc updates referencing GitHub instead of sf.net
- drop CVE-2018-6381.patch
* merged in a803559fa9194be895422ba3684cf6309b6bb598
- drop CVE-2018-6484.patch
* merged in 0c0c9256b0903f664bca25dd8d924211f81e01d3
- drop CVE-2018-6540.patch
* merged in 15b8c969df962a444dfa07b3d5bd4b27dc0dbba7
- drop CVE-2018-6542.patch
* merged in 938011cd60f5a8a2a16a49e5f317aca640cf4110 - Changed %license to %doc in SPEC file. - If the size of the central directory is too big, reject
the file.
Then, if loading the ZIP file fails, display an error message.
[CVE-2018-6542.patch, CVE-2018-6542, bsc#1079094] - If an extension block is too small to hold an extension,
do not use the information therein.
- If the End of central directory record (EOCD) contains an
Offset of start of central directory which is beyond the end of
the file, reject the file.
[CVE-2018-6540, bsc#1079096, CVE-2018-6540.patch] - Reject the ZIP file and report it as corrupt if the size of the
central directory and/or the offset of start of central directory
point beyond the end of the ZIP file.
[CVE-2018-6484, boo#1078701, CVE-2018-6484.patch] - If a file is uncompressed, compressed and uncompressed sizes
should be identical.
[CVE-2018-6381, bsc#1078497, CVE-2018-6381.patch] - Drop tests as they fail completely anyway, not finding lib needing
zip command, this should allow us to kill python dependency
- Also drop docs subdir avoiding python dependency for it
* The generated xmls were used for mans too but we shipped those
only in devel pkg and as such we will live without them - Version update to 0.13.67:
* Various fixes found by fuzzing
* Merged bellow patches
- Remove merged patches:
* zziplib-CVE-2017-5974.patch
* zziplib-CVE-2017-5975.patch
* zziplib-CVE-2017-5976.patch
* zziplib-CVE-2017-5978.patch
* zziplib-CVE-2017-5979.patch
* zziplib-CVE-2017-5981.patch
- Switch to github tarball as upstream seem no longer pull it to
sourceforge
- Remove no longer applying patch zziplib-unzipcat-NULL-name.patch
* The sourcecode was quite changed for this to work this way
anymore, lets hope this is fixed too - Packaking changes:
* Depend on python2 explicitly
* Cleanup with spec-cleaner - Several bugs fixed:
* heap-based buffer overflows
(bsc#1024517, CVE-2017-5974, zziplib-CVE-2017-5974.patch)
* check if "relative offset of local header" in "central
directory header" really points to a local header
(ZZIP_FILE_HEADER_MAGIC)
(bsc#1024528, CVE-2017-5975, zziplib-CVE-2017-5975.patch)
* protect against bad formatted data in extra blocks
(bsc#1024531, CVE-2017-5976, zziplib-CVE-2017-5976.patch)
* NULL pointer dereference in main (unzzipcat-mem.c)
(bsc#1024532, bsc#1024536, CVE-2017-5975,
zziplib-CVE-2017-5975.patch)
* protect against huge values of "extra field length"
in local file header and central file header
(bsc#1024533, CVE-2017-5978, zziplib-CVE-2017-5978.patch)
* clear ZZIP_ENTRY record before use.
(bsc#1024534, bsc#1024535, CVE-2017-5979, CVE-2017-5977,
zziplib-CVE-2017-5979.patch)
* prevent unzzipcat.c from trying to print a NULL name
(bsc#1024537, zziplib-unzipcat-NULL-name.patch)
* Replace assert() by going to error exit.
(bsc#1034539, CVE-2017-5981, zziplib-CVE-2017-5981.patch) h04-armsrv2 1723532837
! " # $ % & ' ( ) * + , - . / 0 0.13.69 0.13.69 0.13.69 0.13.69 0.13.69-150000.3.20.1 0.13.69-150000.3.20.1 unzip-mem unzzip unzzip-big unzzip-mem unzzip-mix zzcat zzdir zzxorcat zzxorcopy zzxordir zzip zzip-io.h zzip.h _config.h _msvc.h autoconf.h conf.h fetch.h file.h format.h fseeko.h info.h lib.h memdisk.h mmapped.h plugin.h stdint.h types.h wrap.h write.h zzip.h zzip32.h zziplib.h libzzip.so libzzipfseeko.so libzzipmmapped.so libzzipwrap.so zzip-zlib-config.pc zzipfseeko.pc zziplib.pc zzipmmapped.pc zzipwrap.pc zziplib.m4 zziplib-devel ChangeLog README README.SDL TODO /usr/bin/ /usr/include/ /usr/include/zzip/ /usr/lib64/ /usr/lib64/pkgconfig/ /usr/share/aclocal/ /usr/share/doc/packages/ /usr/share/doc/packages/zziplib-devel/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:35220/SUSE_SLE-15_Update/d4cf1719d7ddfd380f7d75a99444cfe5-zziplib.SUSE_SLE-15_Update drpm xz 5 aarch64-suse-linux
ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=87949f28ec9ffb323aea69dc9519a51b11a52cc8, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=1d2c72117321e852ff0cfbf44705a7ba9ce3672c, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=ce814b9e0293faa70bcb391cf0637ca2f086cd16, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=51fe153cf91b9d33a3a06282c9d444a23ca03acb, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=b343c14c233b0df758dd791351080761c9b49dc9, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=5d8e38adbe340b5ee2141690416845f48c940c1b, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=d391cf8eb61d34d30f91509c128b42d909b94a2b, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=be4a29f408510a21b1c8f3d9b7d27b51a610d9ed, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=3ce7b7d4c367575148989b6de17299e7ca6ec3f2, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=e0c9dd4f8d40e446e9fc6714670acf83e0baf0d6, for GNU/Linux 3.7.0, stripped directory C source, ASCII text pkgconfig file M4 macro processor script, ASCII text UTF-8 Unicode text ASCII text " ' + . 0 3 6 9 R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R P R P R R P R R P R R P R R D|1u; utf-8 0194c7c86ad583189f8b83e47e82495c396bba84367519408b53b855c3a1894b ? 7zXZ
! t/M] "k%JsXNģ'68"d35HXVd5xu{qg)|O}W;ӮqYuPӲf
_ݗJ+3(qss !G~ dfr2k 2AتIdt_-a{I4>q}΄{SxJ^ydZR>LĬլ,;}Ɯ3D4Jcq)EA51a}?@='2/moDGZ5w3
lImĆma0)ֻiIr ł^^"#jq:WpOf^1X" 4 }Cas( Ka/ Zh7.9rvSq!!:Q
+YRɆ&7f)%14Vf8
T _ciuI,+
I2^;d* *LW5
CA=7S?m3q!ycG.KDq)ed-@u@@fr9yu y 76q tA͎J)@\v >Sh v3# {nPI91m2-3;0BT8h8- է,{fB d%XF
re$ߟ A_9l!WIbVsEQ>&D*^|#Z2e3hWCiW衫?Qm5~A0>$$Omk?`췩>b21|-vifO eQs| M3|PS0Tӊ1_1
-BS9/$#/Gs lw\o+ ت!YT^
WKVh?B1%'q9gCqϛ̚rwMݵ 52\û
;𡸑obj93 aJQ;ے ܧSbtvt0d_)?N #muRO:`l%a RDwEto Ʊߓ'mqz `FXD l E!:gs3 fG7U]e⥾ME1- ՠvrh-׃&sKysrFnkt]-kVAYG<g,3' -.K0. 2m5
+y{^Ԙ
* G5
YZ