linux/poky.git/meta/recipes-extended/libarchive, branch master-next

libarchive: upgrade 3.8.1 -> 3.8.2

2025-10-27T17:20:42+00:00

https://github.com/libarchive/libarchive/releases/tag/v3.8.2 Libarchive 3.8.2 is a bugfix and security release. Security fixes: * 7zip: Fix out of boundary access (#2668) * tar reader: fix checking the result of the strftime (#2719, CVE-2025-25724) (From OE-Core rev: d858f87bc9baf4a01f977861c5521f2d5ffeb5fd) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

libarchive: correct upstream version check

2025-07-03T09:40:17+00:00

The directory index is missing the latest release: https://www.libarchive.org/downloads/ Ticket (which I do not believe will be quickly fixed, considering other similar open tickets): https://github.com/libarchive/libarchive/issues/2693 (From OE-Core rev: e3b3c85f026ffba772c1cc6918113274e13002e5) Signed-off-by: Alexander Kanavin Signed-off-by: Antonin Godard Signed-off-by: Richard Purdie

libarchive: upgrade 3.7.9 -> 3.8.1

2025-06-23T20:42:54+00:00

Includes bugfixes for issues introduced in 3.8.0 License-Update: Public Domain file changed from libarchive/archive_getdate.c to libarchive/archive_parse_date.c https://github.com/libarchive/libarchive/commit/c26f0377457db392bd57a640e8fe25506120f810 (From OE-Core rev: 49d07ca1e4f41e33e82666dadbaedcec7f2822cd) Signed-off-by: Richard Purdie

libarchive: correct upstream version check

2025-04-29T08:55:31+00:00

File index works now: http://libarchive.org/downloads/ (From OE-Core rev: 11dfb88badcbb0daf3744eb3ab82bf9290ae5981) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

libarchive: upgrade 3.7.8 -> 3.7.9

2025-04-20T09:11:16+00:00

https://github.com/libarchive/libarchive/releases/tag/v3.7.9 Libarchive 3.7.9 is a bugfix release Important bugfixes: * a regression in libarchive 3.7.8 regarding GNU sparse entries was fixed (#2558) Also remove CVE_STATUS which was obsolete already before this upgrade. (From OE-Core rev: 670f3fa028f3e873acf4c5265d3f5e4a3aa0ec89) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

libarchive: upgrade 3.7.7 -> 3.7.8

2025-03-25T21:20:41+00:00

This upgrade includes fix for CVE-2024-57970, CVE-2025-25724 and CVE-2025-1632 Changelog: ========== Libarchive 3.7.8 is a bugfix and security release Security fixes: tar reader: Handle truncation in the middle of a GNU long linkname (#2422, CVE-2024-57970) unzip: fix null pointer dereference (#2532, CVE-2025-1632) tar reader: fix unchecked return value in list_item_verbose() (#2532, CVE-2025-25724) Important bugfixes: 7zip reader: add SPARC (#2399) and POWERPC (#2459) filter support for non-LZMA compressors tar reader: Ignore ustar size when pax size is present (#2405) tar writer: Fix bug when -s/a/b/ used more than once with b flag (#2435) cpio: Fix a Y2038 bug on Windows (#2471) libarchive: Handle ARCHIVE_FILTER_LZOP in archive_read_append_filter (#2519) libarchive: Adding missing seeker function to archive_read_open_FILE() (#2539) (From OE-Core rev: 861d6a37e9457510e526c7cd5a63c82d9c48b591) Signed-off-by: Yogita Urade Signed-off-by: Richard Purdie

libarchive: upgrade 3.7.6 -> 3.7.7

2024-10-29T11:19:57+00:00

(From OE-Core rev: 923ac5ed1b258c6ffb19e4b58a3bf00db55d0fb0) Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

libarchive: Update SRC_URI to use https

2024-10-11T11:17:03+00:00

(From OE-Core rev: 1311e94e3983bc1d5ad0d08a6f30081a2c3bef63) Signed-off-by: Jermain Horsman Signed-off-by: Richard Purdie

libarchive: upgrade 3.7.4 -> 3.7.6

2024-10-08T12:26:39+00:00

Drop configurehack.patch, no longer needed Upstream changes break the python3-libarchive-c test suite, a second patch follows. (From OE-Core rev: e093f603963f10dd8a4cfb2a8d3c3f0efb3fb5bf) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libarchive: upgrade 3.7.3 -> 3.7.4

2024-05-28T08:38:23+00:00

Changelog: ========= rar: Fix OOB in rar e8 filter zip: Fix out of boundary access 7zip: Limit amount of properties bsdtar: Fix error handling around strtol() usages passphrase: Improve newline handling on Windows passphrase: Never allow empty passwords rar: Fix "File CRC Error" when extracting specific rar4 archives xar: Avoid infinite link loop zip: Update AppleDouble support for directories zstd: Implement core detection (From OE-Core rev: 7aa9d2e94dd05de51384a4f5d05118c2b4308cbd) Signed-off-by: Yogita Urade Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie