|
 |
6c599f |
Name: libmspack
|
|
|
6c599f |
Version: 0.7
|
|
|
116946 |
Release: 0.3.alpha%{?dist}.4
|
|
|
6c599f |
Summary: Library for CAB and related files compression and decompression
|
|
|
6c599f |
|
|
|
6c599f |
Group: System Environment/Libraries
|
|
|
6c599f |
License: LGPLv2
|
|
|
6c599f |
URL: http://www.cabextract.org.uk/libmspack/
|
|
|
6c599f |
#Source0: http://www.cabextract.org.uk/libmspack/%{name}-%{version}alpha.tar.gz
|
|
|
6c599f |
Source0: https://github.com/kyz/libmspack/archive/v0.7alpha/%{name}-v0.7alpha.tar.gz
|
|
|
6c599f |
Patch0: %{name}-0.4alpha-doc.patch
|
|
|
6c599f |
|
|
|
6c599f |
# Fixes for CVE-2018-18584 CVE-2018-18585
|
|
|
116946 |
Patch1: 0001-Avoid-returning-CHM-file-entries-that-are-blank-beca.patch
|
|
|
116946 |
Patch2: 0002-CAB-block-input-buffer-is-one-byte-too-small-for-max.patch
|
|
|
116946 |
# Fix for CVE-CVE-2019-1010305
|
|
|
116946 |
Patch3: 0003-length-checks-when-looking-for-control-files.patch
|
|
|
6c599f |
|
|
|
6c599f |
BuildRequires: doxygen
|
|
|
6c599f |
BuildRequires: gcc
|
|
|
6c599f |
|
|
|
6c599f |
# Temporarily while building from github tarball:
|
|
|
6c599f |
BuildRequires: autoconf, automake, libtool
|
|
|
6c599f |
|
|
|
6c599f |
|
|
|
6c599f |
%description
|
|
|
6c599f |
The purpose of libmspack is to provide both compression and decompression of
|
|
|
6c599f |
some loosely related file formats used by Microsoft.
|
|
|
6c599f |
|
|
|
6c599f |
%package devel
|
|
|
6c599f |
Summary: Development files for %{name}
|
|
|
6c599f |
Group: Development/Libraries
|
|
|
6c599f |
Requires: %{name} = %{version}-%{release}
|
|
|
6c599f |
Obsoletes: %{name}-doc < 0.2
|
|
|
6c599f |
|
|
|
6c599f |
%description devel
|
|
|
6c599f |
The %{name}-devel package contains libraries, header files and documentation
|
|
|
6c599f |
for developing applications that use %{name}.
|
|
|
6c599f |
|
|
|
6c599f |
|
|
|
6c599f |
%prep
|
|
|
6c599f |
%setup -q -n %{name}-%{version}alpha/libmspack
|
|
|
6c599f |
%patch0 -p1
|
|
|
6c599f |
%patch1 -p2
|
|
|
6c599f |
%patch2 -p2
|
|
|
6c599f |
%patch3 -p2
|
|
|
6c599f |
|
|
|
6c599f |
chmod a-x mspack/mspack.h
|
|
|
6c599f |
|
|
|
6c599f |
# Temporarily while building from github tarball:
|
|
|
6c599f |
autoreconf -i
|
|
|
6c599f |
|
|
|
6c599f |
|
|
|
6c599f |
%build
|
|
|
6c599f |
CFLAGS="%{optflags} -fno-strict-aliasing" \
|
|
|
6c599f |
%configure --disable-static --disable-silent-rules
|
|
|
6c599f |
|
|
|
6c599f |
# disable rpath the hard way
|
|
|
6c599f |
sed -i 's|^hardcode_libdir_flag_spec=.*|hardcode_libdir_flag_spec=""|g' libtool
|
|
|
6c599f |
sed -i 's|^runpath_var=LD_RUN_PATH|runpath_var=DIE_RPATH_DIE|g' libtool
|
|
|
6c599f |
|
|
|
6c599f |
make %{?_smp_mflags}
|
|
|
6c599f |
|
|
|
6c599f |
|
|
|
6c599f |
%install
|
|
|
6c599f |
make install DESTDIR=$RPM_BUILD_ROOT INSTALL='install -p'
|
|
|
6c599f |
rm $RPM_BUILD_ROOT%{_libdir}/libmspack.la
|
|
|
6c599f |
|
|
|
6c599f |
iconv -f ISO_8859-1 -t utf8 ChangeLog --output Changelog.utf8
|
|
|
6c599f |
touch -r ChangeLog Changelog.utf8
|
|
|
6c599f |
mv Changelog.utf8 ChangeLog
|
|
|
6c599f |
|
|
|
6c599f |
pushd doc
|
|
|
6c599f |
doxygen
|
|
|
6c599f |
find html -type f | xargs touch -r %{SOURCE0}
|
|
|
6c599f |
rm -f html/installdox
|
|
|
6c599f |
popd
|
|
|
6c599f |
|
|
|
6c599f |
# CVE-2018-18586: The upstream author didn't intend these examples to
|
|
|
6c599f |
# be installed and shipped, and in libmspack 0.9 they are moved into
|
|
|
6c599f |
# an examples directory in the source. chmextract contains a
|
|
|
6c599f |
# directory traversal exploit. Remove the binaries.
|
|
|
6c599f |
rm $RPM_BUILD_ROOT%{_bindir}/cabrip
|
|
|
6c599f |
rm $RPM_BUILD_ROOT%{_bindir}/chmextract
|
|
|
6c599f |
rm $RPM_BUILD_ROOT%{_bindir}/msexpand
|
|
|
6c599f |
rm $RPM_BUILD_ROOT%{_bindir}/oabextract
|
|
|
6c599f |
|
|
|
6c599f |
|
|
|
6c599f |
%files
|
|
|
6c599f |
%doc README TODO COPYING.LIB ChangeLog AUTHORS
|
|
|
6c599f |
%{_libdir}/%{name}.so.*
|
|
|
6c599f |
|
|
|
6c599f |
%files devel
|
|
|
6c599f |
%doc doc/html
|
|
|
6c599f |
%{_includedir}/mspack.h
|
|
|
6c599f |
%{_libdir}/%{name}.so
|
|
|
6c599f |
%{_libdir}/pkgconfig/%{name}.pc
|
|
|
6c599f |
|
|
|
6c599f |
|
|
|
6c599f |
%changelog
|
|
|
116946 |
* Fri Aug 2 2019 Richard W.M. Jones <rjones@redhat.com> - 0.7-0.2.alpha.4
|
|
|
116946 |
- Fix for CVE-2019-1010305
|
|
|
116946 |
- Remove "fix" for CVE-2018-14680 as this fix is included in base tar ball.
|
|
|
116946 |
resolves: rhbz#1736745, rhbz#1736743
|
|
|
116946 |
|
|
|
116946 |
* Thu Mar 21 2019 Richard W.M. Jones <rjones@redhat.com> - 0.7-0.2.alpha.3
|
|
|
116946 |
- Add gating tests resolves: rhbz#1682770
|
|
|
116946 |
|
|
|
6c599f |
* Mon Dec 10 2018 Richard W.M. Jones <rjones@redhat.com> - 0.7-0.1.alpha.3
|
|
|
6c599f |
- Fix for CVE-2018-14680
|
|
|
6c599f |
resolves: rhbz#1610937
|
|
|
6c599f |
|
|
|
6c599f |
* Fri Dec 7 2018 Richard W.M. Jones <rjones@redhat.com> - 0.7-0.1.alpha.2
|
|
|
6c599f |
- Fixes for CVE-2018-18584 CVE-2018-18585.
|
|
|
6c599f |
resolves: rhbz#1644220
|
|
|
6c599f |
|
|
|
6c599f |
* Wed Nov 14 2018 Richard W.M. Jones <rjones@redhat.com> - 0.7-0.1.alpha.1
|
|
|
6c599f |
- Remove examples (CVE-2018-18586)
|
|
|
6c599f |
resolves: rhbz#1648376
|
|
|
6c599f |
|
|
|
6c599f |
* Wed Aug 01 2018 Richard W.M. Jones <rjones@redhat.com> - 0.7-0.1.alpha
|
|
|
6c599f |
- New upstream version 0.7alpha.
|
|
|
6c599f |
- No tarball was uploaded so temporarily use tarball from github.
|
|
|
6c599f |
- Fixes CVE-2018-14679 libmspack: off-by-one error in the CHM PMGI/PMGL
|
|
|
6c599f |
chunk number validity checks
|
|
|
6c599f |
|
|
|
6c599f |
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.6-0.3.alpha
|
|
|
6c599f |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
|
|
6c599f |
|
|
|
6c599f |
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.6-0.2.alpha
|
|
|
6c599f |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
6c599f |
|
|
|
6c599f |
* Tue Sep 19 2017 Dan Horák <dan[at]danny.cz> - 0.6-0.1.alpha
|
|
|
6c599f |
- updated to 0.6alpha (fixes CVE-2017-6419 and CVE-2017-11423)
|
|
|
6c599f |
|
|
|
6c599f |
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.5-0.10.alpha
|
|
|
6c599f |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
|
|
6c599f |
|
|
|
6c599f |
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.5-0.9.alpha
|
|
|
6c599f |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
6c599f |
|
|
|
6c599f |
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.5-0.8.alpha
|
|
|
6c599f |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
6c599f |
|
|
|
6c599f |
* Wed Jul 27 2016 Dan Horák <dan[at]danny.cz> - 0.5-0.7.alpha
|
|
|
6c599f |
- install the actual expand binary
|
|
|
6c599f |
|
|
|
6c599f |
* Wed Jul 27 2016 Dan Horák <dan[at]danny.cz> - 0.5-0.6.alpha
|
|
|
6c599f |
- install the expand tool as msexpand (#1319357)
|
|
|
6c599f |
|
|
|
6c599f |
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.5-0.5.alpha
|
|
|
6c599f |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
6c599f |
|
|
|
6c599f |
* Thu Jul 30 2015 Richard W.M. Jones <rjones@redhat.com> - 0.5-0.4.alpha
|
|
|
6c599f |
- Avoid 'test/md5.c:126:3: warning: dereferencing type-punned pointer
|
|
|
6c599f |
will break strict-aliasing rules' by adding -fno-strict-aliasing flag.
|
|
|
6c599f |
|
|
|
6c599f |
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.5-0.2.alpha
|
|
|
6c599f |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
|
|
6c599f |
|
|
|
6c599f |
* Tue Mar 03 2015 Dan Horák <dan[at]danny.cz> - 0.5-0.1.alpha
|
|
|
6c599f |
- updated to 0.5alpha
|
|
|
6c599f |
|
|
|
6c599f |
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4-0.4.alpha
|
|
|
6c599f |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
|
|
6c599f |
|
|
|
6c599f |
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4-0.3.alpha
|
|
|
6c599f |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
6c599f |
|
|
|
6c599f |
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4-0.2.alpha
|
|
|
6c599f |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
|
|
6c599f |
|
|
|
6c599f |
* Tue May 28 2013 Dan Horák <dan[at]danny.cz> - 0.4-0.1.alpha
|
|
|
6c599f |
- updated to 0.4alpha
|
|
|
6c599f |
|
|
|
6c599f |
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.3-0.4.alpha
|
|
|
6c599f |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
|
|
|
6c599f |
|
|
|
6c599f |
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.3-0.3.alpha
|
|
|
6c599f |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
6c599f |
|
|
|
6c599f |
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.3-0.2.alpha
|
|
|
6c599f |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
|
|
6c599f |
|
|
|
6c599f |
* Mon May 16 2011 Dan Horák <dan[at]danny.cz> - 0.3-0.1.alpha
|
|
|
6c599f |
- updated to 0.3alpha
|
|
|
6c599f |
|
|
|
6c599f |
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2-0.2.20100723alpha
|
|
|
6c599f |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
|
|
6c599f |
|
|
|
6c599f |
* Mon Aug 30 2010 Dan Horák <dan[at]danny.cz> - 0.2-0.1.20100723alpha
|
|
|
6c599f |
- updated to 0.2alpha released 2010/07/23
|
|
|
6c599f |
- merged the doc subpackage with devel
|
|
|
6c599f |
|
|
|
6c599f |
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.0-0.7.20060920alpha
|
|
|
6c599f |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
|
|
|
6c599f |
|
|
|
6c599f |
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.0-0.6.20060920alpha
|
|
|
6c599f |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
|
|
|
6c599f |
|
|
|
6c599f |
* Wed Feb 13 2008 Marc Wiriadisastra <marc@mwiriadi.id.au> - 0.0-0.5-20060920alpha
|
|
|
6c599f |
- Rebuild for gcc4.3
|
|
|
6c599f |
|
|
|
6c599f |
* Sun Jan 20 2008 Marc Wiriadisastra <marc@mwiriadi.id.au> - 0.0-0.4.20060920alpha
|
|
|
6c599f |
- installed documentation into html subdir
|
|
|
6c599f |
- manually installed doc's for main package
|
|
|
6c599f |
|
|
|
6c599f |
* Sun Jan 20 2008 Marc Wiriadisastra <marc@mwiriadi.id.au> - 0.0-0.3.20060920alpha
|
|
|
6c599f |
- Got source using wget -N
|
|
|
6c599f |
- Removed some doc's
|
|
|
6c599f |
- Shifted doc line for doc package
|
|
|
6c599f |
- Added install -p
|
|
|
6c599f |
|
|
|
6c599f |
* Sun Jan 20 2008 Marc Wiriadisastra <marc@mwiriadi.id.au> - 0.0-0.2.20060920alpha
|
|
|
6c599f |
- Changed install script for doc package
|
|
|
6c599f |
- Fixed rpmlint issue with debug package
|
|
|
6c599f |
|
|
|
6c599f |
* Fri Jan 18 2008 Marc Wiriadisastra <marc@mwiriadi.id.au> - 20060920cvs.a-1
|
|
|
6c599f |
- Initial release
|