linux/meta-openembedded.git/meta-oe/recipes-extended/p7zip/p7zip_16.02.bb, branch scarthgap

p7zip 16.02: Fix CVE-2022-47069

2025-12-30T01:37:59+00:00

Upstream Repository: https://sourceforge.net/projects/p7zip/ Bug Details: https://nvd.nist.gov/vuln/detail/CVE-2022-47069 Type: Security Fix CVE: CVE-2022-47069 Score: 7.8 Note: - Commit [1] updates complete p7zip archive source for v17 and includes changes that fixes CVE-2022-47609, adapted fix related changes in current p7zip v16.02. - Similar changes via [2] have been integrated into the upstream 7zip package, which replaced p7zip 16.02 in OE-Core master. For the testing: - Verified fix using steps mentioned at [3], trace not observed. - Validated against known malicious ZIP samples [3] References: [1] https://github.com/p7zip-project/p7zip/commit/d7a903ff13c2 [2] https://github.com/ip7z/7zip/commit/f19f813537c7 [3] https://sourceforge.net/p/p7zip/bugs/241/ [4] https://bugzilla.suse.com/show_bug.cgi?id=CVE-2022-47069 Signed-off-by: Vrushti Dabhi Signed-off-by: Anuj Mittal

p7zip: fix CVE-2023-52169 and CVE-2023-52168

2024-12-15T18:52:02+00:00

According to [1][2], Igor Pavlov, the author of 7-Zip, refused to provide an advisory or any related change log entries. Have to backport a part of ./CPP/7zip/Archive/NtfsHandler.cpp from upstream big commit https://github.com/ip7z/7zip/commit/fc662341e6f85da78ada0e443f6116b978f79f22 [1] https://dfir.ru/2024/06/19/vulnerabilities-in-7-zip-and-ntfs3/ [2] https://dfir.ru/wp-content/uploads/2024/07/screenshot-2024-07-03-at-02-13-40-7-zip-_-bugs-_-2402-two-vulnerabilities-in-the-ntfs-handler.png Signed-off-by: Hongxu Jia Signed-off-by: Armin Kuster

p7zip: Fix for CVE-2016-9296

2023-04-19T15:10:45+00:00

Add patch to fix CVE-2016-9296 Signed-off-by: Virendra Thakur Signed-off-by: Armin Kuster Signed-off-by: Peter Marko Signed-off-by: Khem Raj

p7zip: fix for CVE-2018-5996

2023-04-19T15:10:45+00:00

Add patch to fix CVE-2018-5996 Signed-off-by: Virendra Thakur Signed-off-by: Armin Kuster Signed-off-by: Peter Marko Signed-off-by: Khem Raj

recipes: Update LICENSE variable to use SPDX license identifiers

2022-03-05T01:41:45+00:00

Signed-off-by: Khem Raj

Convert to new override syntax

2021-08-03T17:21:25+00:00

This is the result of automated script (0.9.1) conversion: oe-core/scripts/contrib/convert-overrides.py . converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Martin Jansa

p7zip: build and package lib7z.so needed for fastboot

2021-05-28T13:55:33+00:00

a) use option 7z to build the lib7z.so library This is needed for android-tools for building fastboot from android-tools b) Packaged the lib7z.so and codec libraries as a part of this recipe Fastboot RDepends on it lib7z.so c) Fixed a C++17 forbidden error when lib7z.so is built fixes the below error | ../../../../CPP/7zip/Archive/Wim/WimHandler.cpp: In member function 'virtual LONG NArchive::NWim::CHandler::GetArchiveProperty(PROPID, PROPVARIANT*)': | ../../../../CPP/7zip/Archive/Wim/WimHandler.cpp:308:11: error: use of an operand of type 'bool' in 'operator++' is forbidden in C++17 | 308 | numMethods++; | | ^~~~~~~~~~ | ../../../../CPP/7zip/Archive/Wim/WimHandler.cpp:318:9: error: use of an operand of type 'bool' in 'operator++' is forbidden in C++17 | 318 | numMethods++; Signed-off-by: Nisha Parrakat Signed-off-by: Nisha Parrakat Signed-off-by: Khem Raj

p7zip: simplify recipe

2018-07-04T13:09:58+00:00

The plugin-based 7z binary is mostly useless because it can't find the libraries. Simply just install 7za, and install a compatibility symlink for 7z. Signed-off-by: Ross Burton Signed-off-by: Khem Raj

p7zip: Fix build with clang

2018-05-02T01:17:03+00:00

Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

fix(p7zip): fix CVE-2017-17969

2018-03-02T00:12:55+00:00

Signed-off-by: Radovan Scasny Signed-off-by: Andrej Valek Signed-off-by: Armin Kuster