linux/poky.git/meta/recipes-extended/libarchive/libarchive_3.3.2.bb, branch 2.6_M3

libarchive: Update 3.3.2 -> 3.3.3

2018-09-22T01:45:46+00:00

This upgrades to 3.3.3 release and drop the backported patches when doing the recipe update. (From OE-Core rev: 60d99a4e64fdddbbe5863fa5879c813fa004600b) Signed-off-by: Otavio Salvador Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libarchive: CVE-2017-14501

2018-09-04T10:03:55+00:00

iso9660: validate directory record length Affects libarchive <= 3.3.2 (From OE-Core rev: dea4280623f945c06e8132c888988373e686318e) Signed-off-by: Jagadeesh Krishnanjanappa Signed-off-by: Richard Purdie

libarchive: CVE-2017-14503

2018-08-23T06:50:01+00:00

Reject LHA archive entries with negative size. Affects libarchive = 3.3.2 (From OE-Core rev: d6479f5d2e6de17bac8662f5057d87176524c6fa) Signed-off-by: Jagadeesh Krishnanjanappa Signed-off-by: Richard Purdie

libarchive: Enable xz and lzo by default

2018-01-18T12:50:36+00:00

The XZ format is widely used and multiple recipes inside OE-Core already use it, so making the XZ enabled by default align the expectation of users. The LZO, on the other side, is commonly used in embedded systems due its performance so it makes sense to be available by default. (From OE-Core rev: 6d24b0bc7ebddd10de5ad8f210b8ed85fc6ae769) Signed-off-by: Otavio Salvador Signed-off-by: Richard Purdie

libarchive: re-add non-recursive extract and list support

2017-10-07T22:20:40+00:00

This patch is needed for meta-swupd. Without it, some bsdtar invocations fail with: bsdtar: Option -n is not permitted in mode -x The patch was removed in the update to 3.3.1 with the claim that it had been merged upstream, but that is not the case. (From OE-Core rev: 38c86302ebdf886b887165aff06560c63a1537b9) Signed-off-by: Patrick Ohly Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libarchive: CVE-2017-14502

2017-10-07T22:20:39+00:00

read_header in archive_read_support_format_rar.c suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header. Backport the patch from https://github.com/libarchive/libarchive/commit commit 5562545b5562f6d12a4ef991fae158bf4ccf92b6 CVE: CVE-2017-14502 (From OE-Core rev: 0bedb69abff85cc07ad4a54eed41d15d0a38c080) Signed-off-by: Zhixiong Chi Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libarchive: fix bug929 and CVE-2017-14166

2017-09-12T22:55:29+00:00

(From OE-Core rev: 9b248a17d60b70cb715f15c0401dc5ddc38eee98) Signed-off-by: Andrej Valek Signed-off-by: Richard Purdie

libarchive: Remove xz packageconfig --with-lzmadec option

2017-08-16T23:21:15+00:00

--with-lzmadec option was removed in libarchive commit: 30e1b7efd472e0439bea14df6a2d19cd8b5ac15e See Github PR: https://github.com/libarchive/libarchive/pull/806 (From OE-Core rev: e1dda927d3734c0d272cfc7d99167498ca9d8f6d) Signed-off-by: Fabio Berton Signed-off-by: Richard Purdie

libarchive: Upgrade to 3.3.2 release

2017-07-17T13:01:38+00:00

(From OE-Core rev: 00cd51e4f9e4344faf0d2e6c1a7fa109901b48b2) Signed-off-by: Otavio Salvador Signed-off-by: Ross Burton Signed-off-by: Richard Purdie