Number of commits found: 14

- Update to 1.4

- Get Rid MD5 support

With hat:       portmgr (myself)

Update to 1.3, which fixes two security bugs. Detailed description
from the author follows.

Bug 1: Infinite loop in MS-ZIP decoder [1]

The MS-ZIP and Quantum decoders read bits in roughly the same way as the LZX
decoder, however they don't have "inject two fake bytes" code.

In the situation where read() provides zero bytes, e.g. at the end of file or
end of a CAB block, the LZX decoder handles this by injecting two fake bytes,
then returns an error on subsequent calls. MS-ZIP and Quantum instead return
zero bytes without error. However, all three decoders are written to presume
they will get at least one byte. So this could lead to an infinite loop in
MS-ZIP and Quantum. An infinite loop has definitely been seen in MS-ZIP -
there is a while loop in inflate() of an uncompressed block (block type 0)

(Only the first 15 lines of the commit message are shown above )

- Update to 1.2
- Remove unnecessary patch
- Style

Approved by:    erwin (mentor)

- Add SHA256

Update to version 1.1.

PR:             72817
Submitted by:   KATO Tsuguru

- Update to version 1.0

PR:             ports/64328
Submitted by:   Ports Fury

Add SIZE.

Update to 0.6.

PR:             41729
Submitted by:   Ports Fury

Update to 0.5.    

Update to 0.4.    

Update to 0.3.    

Update to 0.2.    

Add cabextract - a program to extract Microsoft cabinet (.CAB) files.    

Number of commits found: 14

15 vulnerabilities affecting 34 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities