linux/poky.git/meta/recipes-extended/libarchive, branch krogoth

libarchive: respect disable-acl configuration option

2016-09-27T21:18:51+00:00

Update configure.ac to properly handle --disable-acl option [YOCTO #9668] (From OE-Core rev: 84fe3f29f2bdaf98c9beefdfede143084fba093b) (From OE-Core rev: 687d3b8d54aa3190bbbbc94ae2f91303fccf7c8d) Signed-off-by: Maxin B. John Signed-off-by: Richard Purdie Signed-off-by: Denys Dmytriyenko Signed-off-by: Richard Purdie

libarchive: Set xattrs after setting times

2016-03-02T22:39:43+00:00

With Integrity Measurement Architecture (IMA) enabled in Linux kernel the security.ima extended attribute gets overwritten when setting times on a file with a futimens() call. So it's safer to set xattrs after times. (From OE-Core rev: 9bef9e0a9904beeaea1417f9b66089e7555beb26) Signed-off-by: Dmitry Rozhkov Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libarchive-native: Disable libxml2 support

2016-02-01T11:20:19+00:00

For libarchive-native, we don't really need libxml2 support. Adding this means we need libxml2-native which means we need python-native and makes the dependency chains pretty heavy. The target case is unaffected. (From OE-Core rev: 9b3ad50b2239484fddfc918c8c1819e1ffdb634c) Signed-off-by: Richard Purdie

libarchive: Add bsdtar and bsdcpio packages

2016-01-18T11:47:07+00:00

Some products might need to use a tar replacement that 1. supports xattrs and 2. has more permissive license than GNU tar. And the bsdtar binary produced from libarchive meets these requirements. (From OE-Core rev: ebf68926139ae5374c4d2669930d7f3817ad8f5a) Signed-off-by: Dmitry Rozhkov Signed-off-by: Richard Purdie

Add "CVE:" tag to current patches in OE-core

2016-01-11T23:26:32+00:00

The currnet patches in OE-core doesn't have the "CVE:" tag, now part of the policy of the patches. This is patch add this tag to several patches. There might be patches that I miss; the tag can be added in the future. (From OE-Core rev: 065ebeb3e15311d0d45385e15bf557b1c95b1669) Signed-off-by: Mariano Lopez Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libarchive: rename patch to reflect CVE

2015-11-16T11:39:26+00:00

This patch is a CVE fix, so rename it to help CVE detection tools identify it as such. (From OE-Core rev: 3fd05ce1f709cbbd8fdeb1dbfdffbd39922eca6e) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libarchive: fix out of tree builds

2015-05-07T12:40:34+00:00

(From OE-Core rev: 4201e432e4034907efeaebfea6509e821a9ba3c5) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libarchive: Security Advisory - libarchive - CVE-2015-2304

2015-04-28T06:56:56+00:00

libarchive: Updated libarchive packages fix security vulnerability Alexander Cherepanov discovered that bsdcpio, an implementation of the "cpio" program part of the libarchive project, is susceptible to a directory traversal vulnerability via absolute paths. (From OE-Core rev: e64a961e9c5e94e643896e4b68b85bd5b4c27470) Signed-off-by: Li Zhou Signed-off-by: Richard Purdie

libarchive: add PACKAGECONFIG for nettle

2014-08-11T10:27:33+00:00

* fixes following floating dependencies: libarchive/libarchive/latest lost dependency on nettle libarchive/libarchive-bin/latest lost dependency on libxml2 nettle (From OE-Core rev: a4dd641f54f12d454ba9c6db624b94df63f7d220) Signed-off-by: Martin Jansa Signed-off-by: Richard Purdie

libarchive: avoid dependency on e2fsprogs

2014-06-06T08:26:05+00:00

libarchive's configure script looks for ext2fs/ext2_fs.h in order to use some defines for file attributes support if present (but doesn't link to any additional libraries.) There is no configure option to disable this, and if e2fsprogs is rebuilding between do_configure and do_compile you can currently get a failure. Because it doesn't need anything else from e2fsprogs, and e2fsprogs isn't currently buildable for nativesdk anyway, copy the headers in from e2fsprogs-native which we're likely to have built already (and add it to DEPENDS just to be sure we have.) Fixes [YOCTO #6268]. (From OE-Core rev: ad754e46ad477acfbe7543187a5c38bc333b8612) Signed-off-by: Paul Eggleton Signed-off-by: Saul Wold Signed-off-by: Richard Purdie