linux/poky.git/meta/recipes-extended/libarchive/libarchive_3.1.2.bb, branch master-uninative

libarchive: Upgrade to v3.2.0

2016-06-01T11:38:42+00:00

All patches are removed as they are no longer needed. Most were merged into this release of libarchive. "0001-Set-xattrs-after-setting-times.patch" was dropped upstream after discussion, see https://github.com/libarchive/libarchive/pull/664. The COPYING file in libarchive had a couple of minor changes to clarify which files are under which copyrights but the overall license is unaffected. (From OE-Core rev: 4976382011106b9515e44359f2f6bb1d0c69fdb3) Signed-off-by: Paul Barker Signed-off-by: Richard Purdie

libarchive: Set xattrs after setting times

2016-03-02T22:39:43+00:00

With Integrity Measurement Architecture (IMA) enabled in Linux kernel the security.ima extended attribute gets overwritten when setting times on a file with a futimens() call. So it's safer to set xattrs after times. (From OE-Core rev: 9bef9e0a9904beeaea1417f9b66089e7555beb26) Signed-off-by: Dmitry Rozhkov Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libarchive-native: Disable libxml2 support

2016-02-01T11:20:19+00:00

For libarchive-native, we don't really need libxml2 support. Adding this means we need libxml2-native which means we need python-native and makes the dependency chains pretty heavy. The target case is unaffected. (From OE-Core rev: 9b3ad50b2239484fddfc918c8c1819e1ffdb634c) Signed-off-by: Richard Purdie

libarchive: Add bsdtar and bsdcpio packages

2016-01-18T11:47:07+00:00

Some products might need to use a tar replacement that 1. supports xattrs and 2. has more permissive license than GNU tar. And the bsdtar binary produced from libarchive meets these requirements. (From OE-Core rev: ebf68926139ae5374c4d2669930d7f3817ad8f5a) Signed-off-by: Dmitry Rozhkov Signed-off-by: Richard Purdie

libarchive: rename patch to reflect CVE

2015-11-16T11:39:26+00:00

This patch is a CVE fix, so rename it to help CVE detection tools identify it as such. (From OE-Core rev: 3fd05ce1f709cbbd8fdeb1dbfdffbd39922eca6e) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libarchive: fix out of tree builds

2015-05-07T12:40:34+00:00

(From OE-Core rev: 4201e432e4034907efeaebfea6509e821a9ba3c5) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libarchive: Security Advisory - libarchive - CVE-2015-2304

2015-04-28T06:56:56+00:00

libarchive: Updated libarchive packages fix security vulnerability Alexander Cherepanov discovered that bsdcpio, an implementation of the "cpio" program part of the libarchive project, is susceptible to a directory traversal vulnerability via absolute paths. (From OE-Core rev: e64a961e9c5e94e643896e4b68b85bd5b4c27470) Signed-off-by: Li Zhou Signed-off-by: Richard Purdie

libarchive: add PACKAGECONFIG for nettle

2014-08-11T10:27:33+00:00

* fixes following floating dependencies: libarchive/libarchive/latest lost dependency on nettle libarchive/libarchive-bin/latest lost dependency on libxml2 nettle (From OE-Core rev: a4dd641f54f12d454ba9c6db624b94df63f7d220) Signed-off-by: Martin Jansa Signed-off-by: Richard Purdie

libarchive: avoid dependency on e2fsprogs

2014-06-06T08:26:05+00:00

libarchive's configure script looks for ext2fs/ext2_fs.h in order to use some defines for file attributes support if present (but doesn't link to any additional libraries.) There is no configure option to disable this, and if e2fsprogs is rebuilding between do_configure and do_compile you can currently get a failure. Because it doesn't need anything else from e2fsprogs, and e2fsprogs isn't currently buildable for nativesdk anyway, copy the headers in from e2fsprogs-native which we're likely to have built already (and add it to DEPENDS just to be sure we have.) Fixes [YOCTO #6268]. (From OE-Core rev: ad754e46ad477acfbe7543187a5c38bc333b8612) Signed-off-by: Paul Eggleton Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

recipes: Add missing pkgconfig class inherits

2014-06-03T15:49:19+00:00

These recipes all use pkg-config in some way but were missing dependencies on the tool, this patch adds them. (From OE-Core rev: 2543b14dd0ca13005be0df027543431fc8e882ae) Signed-off-by: Richard Purdie