libzzip-0-13-32bit-0.13.69-150000.3.17.1<>,EDeLp9|*AkI8)yLIa1cTgo}`QBO?\dP&8P,hFxԍ>q_R+S=499Kx ](tu.\bx>>uƏROӏ60:Id+<[Ұ#uOpGKKP܃t4zm߅a.$4w};|` }PO7.Φ>OHM>A(?(d + C >DK\   ( 9 nt(8$9x: N> ;B CG TH I X Y! Z!D[!H\!P]!^#4b#>c#d$ve${f$~l$u$v$w'$x'hy'%(@(D(J(Clibzzip-0-13-32bit0.13.69150000.3.17.1ZIP compression libraryZZipLib is a library for dealing with ZIP and ZIP-like archives by using algorithms of zlib.eLh03-ch2b)`SUSE Linux Enterprise 15SUSE LLC LGPL-2.1+https://www.suse.com/System/Librarieshttp://zziplib.sourceforge.netlinuxx86_64/sbin/ldconfig5VeLeLeLeLeLeLeLeLeLeLeLeLeLeLeLeLeL58075ba7f4ffd0d6c4c0277f379f960cd316d2c10ad7a8c7746d6768fc513470f325ab3f3cf553615a60ab08bc2502c89a61225cf3133ebfe88afdfb29f17441c68d0c01793630344ca281c767768a8d67ffb5a73a387cd92f217f1e6fec58e27e623904c717e56a8e7f7bfa389bcc493e1d7e42840d98fc9eb1ed6f7a8d6f68libzzip-0-64.so.13libzzip-0-64.so.13libzzip-0-64.so.13libzzip-0-64.so.13.0.69libzzipfseeko-0-64.so.13libzzipfseeko-0-64.so.13libzzipfseeko-0-64.so.13libzzipfseeko-0-64.so.13.0.69libzzipmmapped-0-64.so.13libzzipmmapped-0-64.so.13libzzipmmapped-0-64.so.13libzzipmmapped-0-64.so.13.0.69libzzipwrap-0-64.so.13.0.69rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootzziplib-0.13.69-150000.3.17.1.src.rpmlibzzip-0-13-32bitlibzzip-0-13-32bit(x86-32)libzzip-0-64.so.13libzzipfseeko-0-64.so.13libzzipmmapped-0-64.so.13libzzipwrap-0-64.so.13zziplib-32bit@@@@@@@@@@@    /bin/shlibc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.2.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.7)libz.so.1libzzip-0-64.so.13rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1e`@^]W]:[[h@Z@Z@Z@Z@ZjZ$ZZyZtRZs@Zg#Zg#Y@XӸvalentin.lefebvre@suse.comjosef.moellers@suse.comjosef.moellers@suse.comjosef.moellers@suse.comjosef.moellers@suse.comjosef.moellers@suse.comjosef.moellers@suse.comjosef.moellers@suse.comavindra@opensuse.orgadam.majer@suse.dejengelh@inai.deavindra@opensuse.orgjosef.moellers@suse.comjosef.moellers@suse.comjosef.moellers@suse.comjosef.moellers@suse.comjosef.moellers@suse.comtchvatal@suse.comtchvatal@suse.commpluskal@suse.comjosef.moellers@suse.com- assert full zzip_file_header. [bsc#1214577, CVE-2020-18770, CVE-2020-18770.patch]- A recent upstream commit has introduced a regression: The return value of the function ‘zzip_fread’ is a signed int and "0" is a valid return value. [bsc#1187526, CVE-2020-18442, bsc1187526-fix-Incorrect-handling-of-function-zzip_fread-return-value.patch]- Make an unconditional error message conditional by checking the return value of a function call. [bsc1154002, bsc1154002-prevent-unnecessary-perror.patch]- Fixed another instance where division by 0 may occur. [bsc#1129403, bsc1129403-prevent-division-by-zero.patch]- Prevent division by zero by first checking if uncompressed size is 0. This may happen with directories which have a compressed and uncompressed size of 0. [bsc#1129403, bsc1129403-prevent-division-by-zero.patch]- Remove any "../" components from pathnames of extracted files. [bsc#1110687, CVE-2018-17828, CVE-2018-17828.patch]- Avoid memory leak from __zzip_parse_root_directory(). Free allocated structure if its address is not passed back. [bsc#1107424, CVE-2018-16548, CVE-2018-16548.patch]- Check if data from End of central directory record makes sense. Especially the Offset of start of central directory must not a) be negative or b) point behind the end-of-file. - Check if compressed size in Central directory file header makes sense, i.e. the file's data does not extend beyond the end of the file. [bsc#1084517, CVE-2018-7726, CVE-2018-7726.patch, bsc#1084519, CVE-2018-7725, CVE-2018-7725.patch]- Update to 0.13.69: * fix a number of CVEs reported with special *.zip PoC files * completing some doc strings while checking the new man-pages to look good * update refs to point to github instead of sf.net * man-pages are generated with new dbk2man.py - docbook xmlto is optional now * a zip-program is still required for testing, but some errors are gone when not present - run spec-cleaner - don't ship Windows only file, README.MSVC6- Drop BR: fdupes since it does nothing.- Fix RPM groups. Remove ineffective --with-pic. Trim redundancies from description. Do not let fdupes run across partitions.- Update to 0.13.68: * fix a number of CVEs reported with special *.zip files * minor doc updates referencing GitHub instead of sf.net - drop CVE-2018-6381.patch * merged in a803559fa9194be895422ba3684cf6309b6bb598 - drop CVE-2018-6484.patch * merged in 0c0c9256b0903f664bca25dd8d924211f81e01d3 - drop CVE-2018-6540.patch * merged in 15b8c969df962a444dfa07b3d5bd4b27dc0dbba7 - drop CVE-2018-6542.patch * merged in 938011cd60f5a8a2a16a49e5f317aca640cf4110- Changed %license to %doc in SPEC file.- If the size of the central directory is too big, reject the file. Then, if loading the ZIP file fails, display an error message. [CVE-2018-6542.patch, CVE-2018-6542, bsc#1079094]- If an extension block is too small to hold an extension, do not use the information therein. - If the End of central directory record (EOCD) contains an Offset of start of central directory which is beyond the end of the file, reject the file. [CVE-2018-6540, bsc#1079096, CVE-2018-6540.patch]- Reject the ZIP file and report it as corrupt if the size of the central directory and/or the offset of start of central directory point beyond the end of the ZIP file. [CVE-2018-6484, boo#1078701, CVE-2018-6484.patch]- If a file is uncompressed, compressed and uncompressed sizes should be identical. [CVE-2018-6381, bsc#1078497, CVE-2018-6381.patch]- Drop tests as they fail completely anyway, not finding lib needing zip command, this should allow us to kill python dependency - Also drop docs subdir avoiding python dependency for it * The generated xmls were used for mans too but we shipped those only in devel pkg and as such we will live without them- Version update to 0.13.67: * Various fixes found by fuzzing * Merged bellow patches - Remove merged patches: * zziplib-CVE-2017-5974.patch * zziplib-CVE-2017-5975.patch * zziplib-CVE-2017-5976.patch * zziplib-CVE-2017-5978.patch * zziplib-CVE-2017-5979.patch * zziplib-CVE-2017-5981.patch - Switch to github tarball as upstream seem no longer pull it to sourceforge - Remove no longer applying patch zziplib-unzipcat-NULL-name.patch * The sourcecode was quite changed for this to work this way anymore, lets hope this is fixed too- Packaking changes: * Depend on python2 explicitly * Cleanup with spec-cleaner- Several bugs fixed: * heap-based buffer overflows (bsc#1024517, CVE-2017-5974, zziplib-CVE-2017-5974.patch) * check if "relative offset of local header" in "central directory header" really points to a local header (ZZIP_FILE_HEADER_MAGIC) (bsc#1024528, CVE-2017-5975, zziplib-CVE-2017-5975.patch) * protect against bad formatted data in extra blocks (bsc#1024531, CVE-2017-5976, zziplib-CVE-2017-5976.patch) * NULL pointer dereference in main (unzzipcat-mem.c) (bsc#1024532, bsc#1024536, CVE-2017-5975, zziplib-CVE-2017-5975.patch) * protect against huge values of "extra field length" in local file header and central file header (bsc#1024533, CVE-2017-5978, zziplib-CVE-2017-5978.patch) * clear ZZIP_ENTRY record before use. (bsc#1024534, bsc#1024535, CVE-2017-5979, CVE-2017-5977, zziplib-CVE-2017-5979.patch) * prevent unzzipcat.c from trying to print a NULL name (bsc#1024537, zziplib-unzipcat-NULL-name.patch) * Replace assert() by going to error exit. (bsc#1034539, CVE-2017-5981, zziplib-CVE-2017-5981.patch)/bin/shzziplib-32bit 0.13.69-150000.3.17.10.13.69-150000.3.17.10.13.69 0.13.69libzzip-0-64.so.10libzzip-0-64.so.11libzzip-0-64.so.12libzzip-0-64.so.13libzzip-0-64.so.13.0.69libzzipfseeko-0-64.so.10libzzipfseeko-0-64.so.11libzzipfseeko-0-64.so.12libzzipfseeko-0-64.so.13libzzipfseeko-0-64.so.13.0.69libzzipmmapped-0-64.so.10libzzipmmapped-0-64.so.11libzzipmmapped-0-64.so.12libzzipmmapped-0-64.so.13libzzipmmapped-0-64.so.13.0.69libzzipwrap-0-64.so.13libzzipwrap-0-64.so.13.0.69/usr/lib/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:13903/SUSE_SLE-15_Update/c63c91594715fe1ff338d69a19d851b2-zziplib.SUSE_SLE-15_Updatedrpmxz5x86_64-suse-linuxELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=916c97aa7cc472ec31658eea7d1c2d060d0fce30, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=6a7da757cfdced0f2c501cc34ca26a1b0991c94c, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=88d65d10db9b1961ba5087ce0643da952de07d2a, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=de0accfeeee39c5ca9ee22dd9f530c9dde5affa3, stripped  PRRRRRRR RPR RRRRRR RPRRRRRRRR RPRR RRRRR Rutf-877a1ae9e9b97a4212c985eed5e707e87bbb6fa27da159729c5f7f0fde813c3c0?7zXZ !t/*+]"k%AKg|m@YXX(g1s%5&M˭]N|W6$Ϧ=COĎc~K;g[땻݊@€q2e'o;{QZQ Nhܐ DBZA|ҏYG@n8|Eзi>;Q) J }:}ZTP 4[UaWPWD! J'"^t+t۫1Kq0!޽k{n @9 (!(P#'N1Cs/=QB8- n. .gZa撒q+AJ(:,& Sql0FMٝYQBHlYs$Cc.R`޹-P?3Y)ϣ67|O~ŋCM(7;Sx'- u,cW1#NR o 6Ja3)]v ɘ30s!D_ᰏ>.U]JOwt}/hTZG3'߷7$|8 $<#w%eӋ.-fЀx;SʚbP'lXꜺϜR XrMO<[xZ!c9*)CeTC;ǻVб.ю$^@Vñ(PC=2ވq[$0w&Tc{卧+EJƒ]V )cRb OuXL8@~a>k Γ,)ê+9cؤqLIy{ʖ\˘*;k O1 iY7KHaX'LdӇX/6-ɮo}wݐۡ6 UE@{a5|˞ xđA ָB菞mtuS=jzn2u&i6NxFWNぃNkrvv@Ȭl=[z0V+0٤7Mp5d},r9]onTV.l#X{yq "8G>q;.8@h4mz_N-`.!̉aƧY8Id?<*(u[{iJl&rUfݬ* ~Md:t,~QYi^ V9jM .mxdzUkB>'2|YʬP;C.C^{"ww- [78)zV`趉_݉4e]]l@Z0%ykUfD:=J2YQf3GQFnt`"AZxv]Q_<|!Wzx@Jj&'NkDObc/i/$}WAmf:™N>O:&Q ;~hrq ZfkTr?N<pCAa{4zTq W,J@CoqWդR™`E/nfb Zc4SѲAUc}J/I)g)96+2* )w9Q rZv㽁5hY!UB4$1HCcM Ae=G(Щi$D eWl* r֓= Fܛ__<2?gH!%hkscsu巗PY|4ryn(PdJMC;o0YD, 9_MKyZK>gtzS1p )c=}^z5P*ɽ,=Rzc+$0}!( 6o5-9WYsuگr_z^9>x |-)*݌rht@,:wxF&1C.S l?>KzyFO'z^Frod7ӝ]7 /2pՓ^&Aph ޒb3oY{uaF]m H^ڌZC#3TvWTvIkG\W yhT_ Es *ɳǩwGINկY~mYsT5 QPv|/1O>8M'kz@ AaƴQjLBzGKݿLs֗W=܁PtC,-FQ!d^ͯ>ӄK;kXNV_埻]<A>y>T{`$q1QNϵ(ѿE!@ua6|3 )>C 2B`nl|_EV[{Cf-"2N?2`MF@O$>iw^n1@Wϸr*A&>5h䪬W4S~jڱiٞTkcIFR#Fc>X+e{Cf.@y@+!̈́\Ye,h'x8ẹ̀S:v/¨ :{A97nVa8X}ǦIS剗vءV|k:= (YoqJ 3=ά5g%"؃ }`=.ڶeer20U YZ