Package: p7zip-rar / 16.02-3

Metadata

Package Version Patches format
p7zip-rar 16.02-3 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
01 clean makefile.patch | (download)

makefile | 87 6 + 81 - 0 !
makefile.common | 139 0 + 139 - 0 !
2 files changed, 6 insertions(+), 220 deletions(-)

 clean makefile


03 include linux makefile.patch | (download)

makefile.linux_amd64_asm | 3 3 + 0 - 0 !
makefile.linux_x86_asm_gcc_4.X | 2 1 + 1 - 0 !
makefile.machine | 20 20 + 0 - 0 !
3 files changed, 24 insertions(+), 1 deletion(-)

 include linux makefile

Include appropriate makefile from makefile.machine
 - makefile.linux_x86_asm_gcc_4.X on i386;
 - makefile.linux_amd64_asm on amd64;
 - makefile.linux_any_cpu_gcc_4.X otherwise.

Update makefile.linux_amd64_asm to have the same visibility
flags as the *gcc_4.X makefiles.

Update makefile.linux_x86_asm_gcc_4.X to use yasm instead
of nasm.

05 hardening flags.patch | (download)

makefile.glb | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 hardening flags

Add support for $(CPPFLAGS) and do not override $(CXXFLAGS)
and $(CFLAGS)

Bug-Debian: https://bugs.debian.org/#682167

06 CVE 2018 5996.patch | (download)

CPP/7zip/Compress/Rar1Decoder.cpp | 13 9 + 4 - 0 !
CPP/7zip/Compress/Rar1Decoder.h | 1 1 + 0 - 0 !
CPP/7zip/Compress/Rar2Decoder.cpp | 10 9 + 1 - 0 !
CPP/7zip/Compress/Rar2Decoder.h | 1 1 + 0 - 0 !
CPP/7zip/Compress/Rar3Decoder.cpp | 23 20 + 3 - 0 !
CPP/7zip/Compress/Rar3Decoder.h | 2 2 + 0 - 0 !
6 files changed, 42 insertions(+), 8 deletions(-)

 cve-2018-5996

Hopefully fix Memory Corruptions via RAR PPMd (CVE-2018-5996) by
applying a few changes from 7Zip 18.00-beta.

Bug-Debian: https://bugs.debian.org/#888314

CVE 2018 10115.patch | (download)

CPP/7zip/Compress/Rar1Decoder.cpp | 16 11 + 5 - 0 !
CPP/7zip/Compress/Rar1Decoder.h | 3 2 + 1 - 0 !
CPP/7zip/Compress/Rar2Decoder.cpp | 17 13 + 4 - 0 !
CPP/7zip/Compress/Rar2Decoder.h | 3 2 + 1 - 0 !
CPP/7zip/Compress/Rar3Decoder.cpp | 19 15 + 4 - 0 !
CPP/7zip/Compress/Rar3Decoder.h | 3 2 + 1 - 0 !
CPP/7zip/Compress/Rar5Decoder.cpp | 8 8 + 0 - 0 !
CPP/7zip/Compress/Rar5Decoder.h | 1 1 + 0 - 0 !
8 files changed, 54 insertions(+), 16 deletions(-)

 fix cve-2018-10115

Apply "patch" taken from https://landave.io/files/patch_7zip_CVE-2018-10115.txt


Bugs-Debian: https://bugs.debian.org/897674