zziplib-devel-0.13.69-150000.3.20.1 < > , K, f;p9|F؝^S
"4::a*k7 塃1daYr7 ?̧cDqGCA_;4 }Ԁk<qG'-1lpP6#t YLY/e˼rMk$WȊ~WD* e0si+b7 ^W
J]/xJ69Ή%0,Spk |.Q!`*1?d uDkY2jV2ylT > > @\ ? @L d & _ : Y _ h 0 ( 0 0
0 0 X 0
0 0 0 0 t T ( 8 8 @ 9 : F . G .$ 0 H . 0 I / 0 X / Y / \ 0@ 0 ] 1 0 ^ 2 b 3y c 4" d 4 e 4 f 4 l 4 u 4 0 v 5x w =x 0 x >8 0 y > = z ? ? @ @ @H C zziplib-devel 0.13.69 150000.3.20.1 Development files for zziplib, a ZIP compression library That are the header files needed for developing applications using
ZZipLib. f;s390zp39 SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1+ https://www.suse.com/ Development/Libraries/C and C++ http://zziplib.sourceforge.net linux s390x 9 9P 9h 9X 9` (x ( ( ( ( h ] N i " 7
} F 8 ) " !| 4
A큤A큤 f:f:f:f:f:f:f:f:f:f:f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f:f:Z5Z5Z5Z524ea5a4605abbbf662b81f5a56076b2739ef0209ac13489bb184f2fd61855d7b bf09789c83e12b4e4b425a7b9585ec86e0d77c6b1bfab60994d5f31f09573c1e fa19e4a0a25a3c5981b735da838a46cda5101edbc5a2e49ed38de79e6b4cc214 065fcd955ea74fa9b05f353c67ddff0e254df9c4f9a16eb03e5219cf73bcec26 f9d5fa4d6fe32c8a9fc8f09d17d736b6e5b632af53b6318722f5e2ea2c67ccf8 ae9b12a1b62d98ab82fb759c2e006c022aa47eb63adc6a32c214a411c3c10ac9 ad5015f7570cf0945817f122d9124825c797ba98b763b4a54a5fabec2f22ec5f 0ab41a663b051111cb42c9c37856f9de801770068c44147ad82a97ada5c521fd aa2721f9ddc2ad1ccfc2deb1ba176b633c63ec8deb37a4975795a5b8e4f8b3bc e624de57a93e2e348390d0e2450794deec309a9d67bb4fd5e3561842645cb958 ac0e5a9e840ddf42c1bdd4548e1e621835d5bc1472b37efc680d3ed4fc29623e 9399427ea91d1dba3717dc23f10ecb215f2c38dd66e84e2b63855082cdeb0c8b 2402f1c189f74ad3902542430e3bdd4b49e7f212098b3dcfa24e3d53e71177ce 6f869eda4b8bd6c31fd4a0615721026a26d4aedfa7d5c4770ca918da4605d9d5 c1b5a4ccf235c40c04846ff74447910f411cb708c750e2f05470865d8308ea63 a96811afd4d7005eb38f061ec9286882de5ef7690d6aa9fe319a3d3fe3ad5ec5 fc024b151bf0625c32f7c68acbd48595dc50eeb384cf9f125012a309826719bc 91edbf67e946e23094ed5ed7f192b74e256984d25526ba75d1ac8f9da60d1115 4211a35936e905742f75d922e55b22af15ffafb967a6b232df3e28f9b59927d9 f5758bc325de855ad461bcb3592f33e0699f5f2469368a08a90a3b8f60d9d4aa e7e28ad7a44508b15af0f974a251092230bcb0f8a2c8eeda64cf452a4fd7569b 21429dbd83226c7dec93ae8ddb56c2fe9788caf1aed0023dc5b778be0f1f2b09 90f725d4225053ff8982ff9d2e9ad427ee6def3cfd4971ff1db04cfb5a71b6cf a448a9444259340336912ca028f6e66e34062a50a974b462568cdbe47cd096b6 879ecf2d72d34875254b7811dc76db70f5eb7b7102fb263784c321b0f1f9dcc9 438ea96242dcb839044595f564c611b5918519dfca54a8f41c0140bacc2a518e 84995c0ae570c227a38b3bd3c57c82fa0e7153e3e6c1ab871bdb7bc288491fbb a6e90361fcf8d2de64f4d072b69b9c7a7a43dced8971f12ab90efe47628c63ee 909c79ae082e2c107c7b6eb4471d15992a19979c327c66393502bee00ebd7e86 f3fe75bf76287c5b8b005516859a0afc06e89b88e05b9ae9d0aad39984139231 62d8b9daa4b5977029cffaac4742a21a192fd5af2e50c6342034e1d6024e7312 57074e56448d4add4a88e47c8291b5edb33d609e5246e2ce09e672fba8eeea1e 14a4164dc4e99a39406c0a85a7d398133cb0c18a1e13e34888ad509dff463a1f 8b4d3b44fd2c93005aa703f3986f49e70e8ada2b0c049997f138191d74e2e7c5 535af3217718876c176a83462e5c1bd7c2fb96108f1ede13648f4d3442c221ee 578f10157a4d2eccbebe05b565d3d05cd56c42ffa9f3ef4ee615811dffd3c5dd 1e02156d70bb8273560bc93f08649b98cc78fd7cde79775d419f1de1c6d428ef 93b72ddd676c5d9a61655d6139f25bb9f422a49a08d69182bfedd654873a166b bef2b7b06f6eb72626dda7efd1a03629651645e0ff98da99443ecefada18aa9e eb92020572a460079f998e343f7d622276f41e3a7853e6de0558ddfdfa795c8a 144b1d4d8aac86ec4829c07897f42749c54321ab5d4e5c8a146d8733aa696368 9d9ff9b30a51ff29a6c69ca9a75c178ed2024828f25876ddba0ef5ff803b2027 libzzip-0.so.13.0.69 libzzipfseeko-0.so.13.0.69 libzzipmmapped-0.so.13.0.69 libzzipwrap-0.so.13.0.69 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root zziplib-0.13.69-150000.3.20.1.src.rpm pkgconfig(zzip-zlib-config) pkgconfig(zzipfseeko) pkgconfig(zziplib) pkgconfig(zzipmmapped) pkgconfig(zzipwrap) zziplib-devel zziplib-devel(s390-64) @ @ @ @ @ @ @ @ @ @ @ @
/usr/bin/pkg-config libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.2.3)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.4)(64bit) libz.so.1()(64bit) libzzip-0-13 libzzip-0.so.13()(64bit) libzzipfseeko-0.so.13()(64bit) libzzipmmapped-0.so.13()(64bit) pkgconfig(zlib) pkgconfig(zzip-zlib-config) pkgconfig(zziplib) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 0.13.69 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 f@e`@^]W]:[ [h@Z@Z@Z@Z@ZjZ$ZZyZtRZs@Zg#Zg#Y@XӸvalentin.lefebvre@suse.com valentin.lefebvre@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com avindra@opensuse.org adam.majer@suse.de jengelh@inai.de avindra@opensuse.org josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com josef.moellers@suse.com tchvatal@suse.com tchvatal@suse.com mpluskal@suse.com josef.moellers@suse.com - fetch_disk_trailer: Don't truncate the size verif.
[bsc#1227178, CVE-2024-39134,
bsc1227178-fetch_disk_trailer-Don-t-truncate-the-size-verif.patch - assert full zzip_file_header.
[bsc#1214577, CVE-2020-18770, CVE-2020-18770.patch] - A recent upstream commit has introduced a regression:
The return value of the function ‘zzip_fread’ is a signed int
and "0" is a valid return value.
[bsc#1187526, CVE-2020-18442,
bsc1187526-fix-Incorrect-handling-of-function-zzip_fread-return-value.patch] - Make an unconditional error message conditional by checking
the return value of a function call.
[bsc1154002, bsc1154002-prevent-unnecessary-perror.patch] - Fixed another instance where division by 0 may occur.
[bsc#1129403, bsc1129403-prevent-division-by-zero.patch] - Prevent division by zero by first checking if uncompressed size
is 0. This may happen with directories which have a compressed
and uncompressed size of 0.
[bsc#1129403, bsc1129403-prevent-division-by-zero.patch] - Remove any "../" components from pathnames of extracted files.
[bsc#1110687, CVE-2018-17828, CVE-2018-17828.patch] - Avoid memory leak from __zzip_parse_root_directory().
Free allocated structure if its address is not passed back.
[bsc#1107424, CVE-2018-16548, CVE-2018-16548.patch] - Check if data from End of central directory record makes sense.
Especially the Offset of start of central directory must not
a) be negative or
b) point behind the end-of-file.
- Check if compressed size in Central directory file header
makes sense, i.e. the file's data does not extend beyond the
end of the file.
[bsc#1084517, CVE-2018-7726, CVE-2018-7726.patch,
bsc#1084519, CVE-2018-7725, CVE-2018-7725.patch] - Update to 0.13.69:
* fix a number of CVEs reported with special *.zip PoC files
* completing some doc strings while checking the new man-pages to
look good
* update refs to point to github instead of sf.net
* man-pages are generated with new dbk2man.py - docbook xmlto is
optional now
* a zip-program is still required for testing, but some errors
are gone when not present
- run spec-cleaner
- don't ship Windows only file, README.MSVC6 - Drop BR: fdupes since it does nothing. - Fix RPM groups. Remove ineffective --with-pic.
Trim redundancies from description.
Do not let fdupes run across partitions. - Update to 0.13.68:
* fix a number of CVEs reported with special *.zip files
* minor doc updates referencing GitHub instead of sf.net
- drop CVE-2018-6381.patch
* merged in a803559fa9194be895422ba3684cf6309b6bb598
- drop CVE-2018-6484.patch
* merged in 0c0c9256b0903f664bca25dd8d924211f81e01d3
- drop CVE-2018-6540.patch
* merged in 15b8c969df962a444dfa07b3d5bd4b27dc0dbba7
- drop CVE-2018-6542.patch
* merged in 938011cd60f5a8a2a16a49e5f317aca640cf4110 - Changed %license to %doc in SPEC file. - If the size of the central directory is too big, reject
the file.
Then, if loading the ZIP file fails, display an error message.
[CVE-2018-6542.patch, CVE-2018-6542, bsc#1079094] - If an extension block is too small to hold an extension,
do not use the information therein.
- If the End of central directory record (EOCD) contains an
Offset of start of central directory which is beyond the end of
the file, reject the file.
[CVE-2018-6540, bsc#1079096, CVE-2018-6540.patch] - Reject the ZIP file and report it as corrupt if the size of the
central directory and/or the offset of start of central directory
point beyond the end of the ZIP file.
[CVE-2018-6484, boo#1078701, CVE-2018-6484.patch] - If a file is uncompressed, compressed and uncompressed sizes
should be identical.
[CVE-2018-6381, bsc#1078497, CVE-2018-6381.patch] - Drop tests as they fail completely anyway, not finding lib needing
zip command, this should allow us to kill python dependency
- Also drop docs subdir avoiding python dependency for it
* The generated xmls were used for mans too but we shipped those
only in devel pkg and as such we will live without them - Version update to 0.13.67:
* Various fixes found by fuzzing
* Merged bellow patches
- Remove merged patches:
* zziplib-CVE-2017-5974.patch
* zziplib-CVE-2017-5975.patch
* zziplib-CVE-2017-5976.patch
* zziplib-CVE-2017-5978.patch
* zziplib-CVE-2017-5979.patch
* zziplib-CVE-2017-5981.patch
- Switch to github tarball as upstream seem no longer pull it to
sourceforge
- Remove no longer applying patch zziplib-unzipcat-NULL-name.patch
* The sourcecode was quite changed for this to work this way
anymore, lets hope this is fixed too - Packaking changes:
* Depend on python2 explicitly
* Cleanup with spec-cleaner - Several bugs fixed:
* heap-based buffer overflows
(bsc#1024517, CVE-2017-5974, zziplib-CVE-2017-5974.patch)
* check if "relative offset of local header" in "central
directory header" really points to a local header
(ZZIP_FILE_HEADER_MAGIC)
(bsc#1024528, CVE-2017-5975, zziplib-CVE-2017-5975.patch)
* protect against bad formatted data in extra blocks
(bsc#1024531, CVE-2017-5976, zziplib-CVE-2017-5976.patch)
* NULL pointer dereference in main (unzzipcat-mem.c)
(bsc#1024532, bsc#1024536, CVE-2017-5975,
zziplib-CVE-2017-5975.patch)
* protect against huge values of "extra field length"
in local file header and central file header
(bsc#1024533, CVE-2017-5978, zziplib-CVE-2017-5978.patch)
* clear ZZIP_ENTRY record before use.
(bsc#1024534, bsc#1024535, CVE-2017-5979, CVE-2017-5977,
zziplib-CVE-2017-5979.patch)
* prevent unzzipcat.c from trying to print a NULL name
(bsc#1024537, zziplib-unzipcat-NULL-name.patch)
* Replace assert() by going to error exit.
(bsc#1034539, CVE-2017-5981, zziplib-CVE-2017-5981.patch) s390zp39 1723533115
! " # $ % & ' ( ) * + , - . / 0 0.13.69 0.13.69 0.13.69 0.13.69 0.13.69-150000.3.20.1 0.13.69-150000.3.20.1 unzip-mem unzzip unzzip-big unzzip-mem unzzip-mix zzcat zzdir zzxorcat zzxorcopy zzxordir zzip zzip-io.h zzip.h _config.h _msvc.h autoconf.h conf.h fetch.h file.h format.h fseeko.h info.h lib.h memdisk.h mmapped.h plugin.h stdint.h types.h wrap.h write.h zzip.h zzip32.h zziplib.h libzzip.so libzzipfseeko.so libzzipmmapped.so libzzipwrap.so zzip-zlib-config.pc zzipfseeko.pc zziplib.pc zzipmmapped.pc zzipwrap.pc zziplib.m4 zziplib-devel ChangeLog README README.SDL TODO /usr/bin/ /usr/include/ /usr/include/zzip/ /usr/lib64/ /usr/lib64/pkgconfig/ /usr/share/aclocal/ /usr/share/doc/packages/ /usr/share/doc/packages/zziplib-devel/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:35220/SUSE_SLE-15_Update/d4cf1719d7ddfd380f7d75a99444cfe5-zziplib.SUSE_SLE-15_Update drpm xz 5 s390x-suse-linux
ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=ad1bbc3b6169a4b60db15b3394b47c0816aa959d, for GNU/Linux 3.2.0, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=ab010a14aae7635f5c7c31030b6e528d627b78b8, for GNU/Linux 3.2.0, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=88088b9596b53a66940fb708cfa437387ff1223d, for GNU/Linux 3.2.0, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=abcba70ae7506f0197a9efeb0d42d6086af47e9a, for GNU/Linux 3.2.0, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=476fb1f4eb376a2ecfba83704cbe258f267fc477, for GNU/Linux 3.2.0, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=6e660ab627d66299c5cc9225a3d2be3e73a7b691, for GNU/Linux 3.2.0, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=770c13773969c8b6ebab55a327e640fbbe51da08, for GNU/Linux 3.2.0, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=63cf94103c1b649cbd8c7b4923b3e6da4ad0ae0f, for GNU/Linux 3.2.0, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=dee8645c728d6984d641f860c2f06c2c2a14e09d, for GNU/Linux 3.2.0, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=527aa7c42587a13bb55cd4682c15fad736a9ddb2, for GNU/Linux 3.2.0, stripped directory C source, ASCII text pkgconfig file M4 macro processor script, ASCII text UTF-8 Unicode text ASCII text
! & * / 1 4 7 : R R R
R R R R R R R R R R R R R R R R
R R R R R R R R R R R R R R R R R R R R R R R R R R R R P R P R R P R R P R R P R R
ha2"rd utf-8 d1ae6cc6966534ade2128efbbfb844b50529826e2c3dac93cb415a9e67336bcb ? 7zXZ
! t/A] "k%JsXNģ'68"d35HHo_ y6ۄFgqH_
y*?NOK{8<3HXי>
UQBj2BQCz-=ݠ։E Q;U< 1#d}SMJ :˿ Ȯhsm42X#=0ЧSNB0Y݀ r9YqPC_ pP8!l݅I0l/we}
x X E>{5fS x!@F;*>P3a ~/_t☾B.j^=*#tt_ҽv Ww#r6'tN0 T=j;fgGN"c Qrϓ\>t
73AYgLRMfa{V|++Xo ʹ[T
A'\hu\$jYM~.*8q 6 }%٬D9D|cbN Gƺ v7tk3kMT &w߃%uB!b1)@psMc+PR2j>e bɠ~g3 =ؠ:VOn@ye=LfOD-0oill
PL1KJG*z=cj~ffe(dlSd+; W;hX/>4ҨI_|# #!H!c kBwU 4f7*DgCwP(bl>\<ߕg"B,ˍv<K]<\]S[l
̴6?0*Ӥ~u^x|"Pq_T9A#Kc?_!UC5 Zd,p*g-f @<@k7
2Q^8˝rIlX)fpS3
} *'U.f'QҢGSO*vc
} aĻ}6^xьebhw=ٕIaW m7IUl҂RFja GM ޚ9W a EKqu~)^-OrV䔴LINʉk^
㚹~-,!s&><#I8i xA1o8+ vS/`ƽ
* &S
YZ