Request 566588 (accepted)

This request supersedes: request 566454 (Show diff), request 566572 (Show diff)

Overview

Request 566588 accepted

- Correct SRPM group.

- Fix typo

- Update to version 0.6
* read_spaninfo(): a CHM file can have no ResetTable and have a
negative length in SpanInfo, which then feeds a negative output
length to lzxd_init(), which then sets frame_size to a value of
your choosing, the lower 32 bits of output length, larger than
LZX_FRAME_SIZE. If the first LZX block is uncompressed, this
writes data beyond the end of the window.
This issue was raised by ClamAV as CVE-2017-6419.
* lzxd_init(), lzxd_set_output_length(), mszipd_init(): due to the
issue mentioned above, these functions now reject negative lengths
* cabd_read_string(): add missing error check on result of read().
If an mspack_system implementation returns an error, it's
interpreted as a huge positive integer, which leads to reading
past the end of the stack-based buffer.
This issue was raised by ClamAV as CVE-2017-11423
- Add subpackage for helper tools
- Run spec-cleaner

Created by adamm over 6 years ago
In state accepted
Supersedes 566454 566572

Submit libmspack

Comments for request 566588 2

Dominique Leuenberger (dimstar) - over 6 years ago

reviewer

+%package -n mspack-tools
+Summary:        Library That Implements Different Microsoft Compressions
+Group:          System/Libraries

This does not look lie a Library - this package contains binaries installed to $PATH

Adam Majer (adamm) - over 6 years ago

author source maintainer

Indeed. It should be Productivity/File utilities. Changed, but not restarting staging just for that ;) Maybe someone will find something else to improve before the Factory Bots pulls it in later.