[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <20180726090936.76ac1839@computer>
Date: Thu, 26 Jul 2018 09:09:36 +0200
From: Hanno Böck <hanno@...eck.de>
To: oss-security@...ts.openwall.com
Subject: Fw: New cabextract 1.7 and libmspack 0.7 release
Several memory safety bugs fixed, see below.
Begin forwarded message:
Date: Thu, 26 Jul 2018 00:46:18 +0100
From: Stuart Caie
Subject: New cabextract 1.7 and libmspack 0.7 release
Hello all,
cabextract 1.7 has been released.
It fixes a few bugs, an introduces a new "--encoding" option, which is
made available if the iconv() function and/or libiconv library are
available on your system. It also now tries calling setlocale() (if
present) with several possible locales that have a UTF-8 ctype, to
allow towlower() (if present) to lowercase non-ASCII characters.
cabextract can be downloaded from https://www.cabextract.org.uk/
SHA256 sums:
06d3cdded6519fccff1532f64ab54ce6cc3c7be51bcc6fff0f91092179a9bb26
cabextract-1.7-1.i386.rpm
11570d7e5ba0f46f458b88d76d2f0bdcad3a1266055ea5c8229830be2023e16e
cabextract-1.7-1.src.rpm
297203c826c004801ea1b17414f568e7bdf56c3ae9bbaca4d8514e8a56e506bd
cabextract-1.7.tar.gz
libmspack 0.7alpha has also been released. It fixes several bugs:
* bad KWAJ file header extensions could cause a one or two byte
overwrite
* The character U+0100 in a CHM filename could cause a one-byte overread
* libmspack now rejects blank CHM filenames.
* Fixed off-by-one error in CHM PMGI/PMGL chunk number validity checks,
which could cause a crash by dereferencing uninitialised data beyond
the end of the fast_find() chunk cache.
libmspack can be downloaded from
https://www.cabextract.org.uk/libmspack/
SHA256 sum:
36e0516cdb60617871d396fb85464f440b4ab76942ce6bdd0438ca8d70f32772
libmspack-0.7alpha.tar.gz
Regards
Stuart
--
Hanno Böck
https://hboeck.de/
mail/jabber: hanno@...eck.de
GPG: FE73757FA60E4E21B937579FA5880072BBB51E42
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
