pool/libarchive
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 1135735 from Archiving

Browse Source 
OBS-URL: https://build.opensuse.org/request/show/1135735
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libarchive?expand=0&rev=49
This commit is contained in:
Dominique Leuenberger 2024-01-04 14:57:03 +00:00 committed by Git OBS Bridge
commit 824dc2deb2
6 changed files with 108 additions and 38 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
libarchive-3.7.0.tar.xz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:44729a0cc3b0b0be6742a9873d25e85e240c9318f5f5ebf2cca6bc84d7b91b07
size 5243356

14
libarchive-3.7.0.tar.xz.asc
View File

@ -1,14 +0,0 @@
-----BEGIN PGP SIGNATURE-----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=W7Hb
-----END PGP SIGNATURE-----

3
libarchive-3.7.2.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:04357661e6717b6941682cde02ad741ae4819c67a260593dfb2431861b251acb
size 5237056

14
libarchive-3.7.2.tar.xz.asc Normal file
View File

@ -0,0 +1,14 @@
-----BEGIN PGP SIGNATURE-----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=aLKb
-----END PGP SIGNATURE-----

102
libarchive.changes
View File

@ -1,3 +1,21 @@
-------------------------------------------------------------------
Fri Dec 29 18:39:00 UTC 2023 - Dirk Müller <dmueller@suse.com>
- skip write tests on 32bit, they OOM
-------------------------------------------------------------------
Sun Sep 17 08:53:58 UTC 2023 - Dirk Müller <dmueller@suse.com>
- update to 3.7.2:
* Multiple vulnerabilities have been fixed in the PAX writer
* bsdunzip(1) now correctly handles arguments following an
-x after the zipfile
* zstd filter now supports the "long" write option
* SEGV and stack buffer overflow in verbose mode of cpio
* bsdunzip updated to match latest upstream code
* miscellaneous functional bugfixes
------------------------------------------------------------------- -------------------------------------------------------------------
Mon Jul 24 06:36:59 UTC 2023 - Bernhard Wiedemann <bwiedemann@suse.com> Mon Jul 24 06:36:59 UTC 2023 - Bernhard Wiedemann <bwiedemann@suse.com>
@ -9,12 +27,20 @@ Mon Jul 24 06:36:59 UTC 2023 - Bernhard Wiedemann <bwiedemann@suse.com>
Fri Dec 23 07:57:09 UTC 2022 - Dirk Müller <dmueller@suse.com> Fri Dec 23 07:57:09 UTC 2022 - Dirk Müller <dmueller@suse.com>
- update to 3.6.2 (bsc#1205629, CVE-2022-36227) - update to 3.6.2 (bsc#1205629, CVE-2022-36227)
* NULL pointer dereference vulnerability in archive_write.c * NULL pointer dereference vulnerability in archive_write.c
* include ZSTD in Windows builds (#1688) * include ZSTD in Windows builds (#1688)
* SSL fixes on Windows (#1714, #1723, #1724) * SSL fixes on Windows (#1714, #1723, #1724)
* rar5 reader: fix possible garbled output with bsdtar -O (#1745) * rar5 reader: fix possible garbled output with bsdtar -O (#1745)
* mtree reader: support reading mtree files with tabs (#1783) * mtree reader: support reading mtree files with tabs (#1783)
* various small fixes for issues found by CodeQL * various small fixes for issues found by CodeQL
- Drop upstream merged CVE-2022-36227.patch
-------------------------------------------------------------------
Tue Nov 22 14:20:36 UTC 2022 - Danilo Spinella <danilo.spinella@suse.com>
- Fix CVE-2022-36227, Handle a calloc returning NULL
(CVE-2022-36227, bsc#1205629)
* CVE-2022-36227.patch
------------------------------------------------------------------- -------------------------------------------------------------------
Fri Apr 8 17:01:05 UTC 2022 - Dirk Müller <dmueller@suse.com> Fri Apr 8 17:01:05 UTC 2022 - Dirk Müller <dmueller@suse.com>
@ -26,7 +52,15 @@ Fri Apr 8 17:01:05 UTC 2022 - Dirk Müller <dmueller@suse.com>
* RARv4 redaer: fix multiple issues in RARv4 filter code (introduced in libarchive 3.6.0) * RARv4 redaer: fix multiple issues in RARv4 filter code (introduced in libarchive 3.6.0)
* fix heap use after free in archive_read_format_rar_read_data() (OSS-Fuzz 44547, 52efa50) * fix heap use after free in archive_read_format_rar_read_data() (OSS-Fuzz 44547, 52efa50)
* fix null dereference in read_data_compressed() (OSS-Fuzz 44843, 1271f77) * fix null dereference in read_data_compressed() (OSS-Fuzz 44843, 1271f77)
* fix heap user after free in run_filters() (OSS-Fuzz 46279, #1715) * fix heap user after free in run_filters() (OSS-Fuzz 46279, #1715)
- Drop upstream merged fix-CVE-2022-26280.patch
-------------------------------------------------------------------
Tue Apr 7 16:28:45 UTC 2022 - Danilo Spinella <danilo.spinella@suse.com>
- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
(CVE-2022-26280, bsc#1197634)
* fix-CVE-2022-26280.patch
------------------------------------------------------------------- -------------------------------------------------------------------
Thu Feb 24 19:18:32 UTC 2022 - Ferdinand Thiessen <rpm@fthiessen.de> Thu Feb 24 19:18:32 UTC 2022 - Ferdinand Thiessen <rpm@fthiessen.de>
@ -41,7 +75,19 @@ Thu Feb 24 19:18:32 UTC 2022 - Ferdinand Thiessen <rpm@fthiessen.de>
* tar: respect "--ignore-zeros" in c, r and u modes * tar: respect "--ignore-zeros" in c, r and u modes
* reduced size of application binaries * reduced size of application binaries
* internal code optimizations * internal code optimizations
- Drop upstream merged fix-following-symlinks.patch - Drop upstream merged:
* fix-following-symlinks.patch
* fix-CVE-2021-36976.patch
-------------------------------------------------------------------
Mon Feb 23 14:44:21 UTC 2022 - Danilo Spinella <danilo.spinella@suse.com>
- Fix CVE-2021-36976 use-after-free in copy_string
(CVE-2021-36976, bsc#1188572)
* fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
weren't previously mentioned in the changes file:
CVE-2017-5601, bsc#1022528, bsc#1189528
------------------------------------------------------------------- -------------------------------------------------------------------
Mon Nov 29 09:00:26 UTC 2021 - Adrian Schröter <adrian@suse.de> Mon Nov 29 09:00:26 UTC 2021 - Adrian Schröter <adrian@suse.de>
@ -55,7 +101,7 @@ Sun Nov 7 19:13:11 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
- update to 3.5.2: - update to 3.5.2:
* CPIO: Support for PWB and v7 binary cpio formats * CPIO: Support for PWB and v7 binary cpio formats
* ZIP reader: Support of deflate algorithm in symbolic link decompression * ZIP reader: Support of deflate algorithm in symbolic link decompression
* security: fix handling of symbolic link ACLs on Linux (boo#1192425) * security: fix handling of symbolic link ACLs on Linux (boo#1192425)
* security: never follow symlinks when setting file flags on Linux (boo#1192426) * security: never follow symlinks when setting file flags on Linux (boo#1192426)
* security: do not follow symlinks when processing the fixup list (boo#1192427) * security: do not follow symlinks when processing the fixup list (boo#1192427)
@ -65,7 +111,27 @@ Sun Nov 7 19:13:11 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
* ZIP reader: fix excessive read for padded zip * ZIP reader: fix excessive read for padded zip
* CAB reader: fix double free * CAB reader: fix double free
* handle short writes from archive_write_callback * handle short writes from archive_write_callback
- Drop upstream mereged:
* CVE-2021-23177.patch
* CVE-2021-31566.patch
* bsc1192427.patch
-------------------------------------------------------------------
Fri Oct 21 14:18:01 UTC 2021 - Danilo Spinella <danilo.spinella@suse.com>
- Fix CVE-2021-31566, modifies file flags of symlink target
(CVE-2021-31566, bsc#1192426.patch)
CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
bsc1192427.patch
-------------------------------------------------------------------
Mon Sep 12 14:07:20 UTC 2021 - Danilo Spinella <danilo.spinella@suse.com>
- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
(CVE-2021-23177, bsc#1192425)
* CVE-2021-23177.patch
------------------------------------------------------------------- -------------------------------------------------------------------
Wed Jan 6 16:11:01 UTC 2021 - Dirk Müller <dmueller@suse.com> Wed Jan 6 16:11:01 UTC 2021 - Dirk Müller <dmueller@suse.com>
@ -156,7 +222,7 @@ Fri Nov 22 13:17:53 UTC 2019 - Adrian Schröter <adrian@suse.de>
------------------------------------------------------------------- -------------------------------------------------------------------
Sun Aug 18 12:33:05 UTC 2019 - Ismail Dönmez <idonmez@suse.com> Sun Aug 18 12:33:05 UTC 2019 - Ismail Dönmez <idonmez@suse.com>
- Switch to cmake build - Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX - Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test - Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools - Add fix-soversion.patch to fix the soversion to 13 as autotools
@ -338,7 +404,7 @@ Tue Nov 11 12:07:46 UTC 2014 - jsegitz@novell.com
------------------------------------------------------------------- -------------------------------------------------------------------
Wed May 28 17:18:59 UTC 2014 - crrodriguez@opensuse.org Wed May 28 17:18:59 UTC 2014 - crrodriguez@opensuse.org
- libarchive-xattr.patch, fix subtle wrong library check - libarchive-xattr.patch, fix subtle wrong library check
that causes this package to depend on libattr when it should that causes this package to depend on libattr when it should
be using glibc. be using glibc.
@ -358,15 +424,15 @@ Tue Aug 20 05:34:09 UTC 2013 - crrodriguez@opensuse.org
------------------------------------------------------------------- -------------------------------------------------------------------
Mon Aug 19 21:14:38 UTC 2013 - crrodriguez@opensuse.org Mon Aug 19 21:14:38 UTC 2013 - crrodriguez@opensuse.org
- libarchive-openssl.patch: Call OPENSSL_config where needed, - libarchive-openssl.patch: Call OPENSSL_config where needed,
otherwise on systems configured to use openSSL engines such otherwise on systems configured to use openSSL engines such
as via-padlock wont benefit from hardware acceleration. as via-padlock wont benefit from hardware acceleration.
------------------------------------------------------------------- -------------------------------------------------------------------
Fri Aug 16 20:07:27 UTC 2013 - andreas.stieger@gmx.de Fri Aug 16 20:07:27 UTC 2013 - andreas.stieger@gmx.de
- update to 3.1.2 - update to 3.1.2
This is a maintenance update to fix issues with the new RAR This is a maintenance update to fix issues with the new RAR
seeking feature. seeking feature.
- libarchive's new website moved to http://www.libarchive.org. - libarchive's new website moved to http://www.libarchive.org.
@ -435,22 +501,22 @@ Tue Aug 7 18:47:14 UTC 2012 - dimstar@opensuse.org
------------------------------------------------------------------- -------------------------------------------------------------------
Mon May 7 08:35:39 UTC 2012 - werner@suse.de Mon May 7 08:35:39 UTC 2012 - werner@suse.de
- Enforce usage of reentrant versions of libc functions - Enforce usage of reentrant versions of libc functions
------------------------------------------------------------------- -------------------------------------------------------------------
Mon Feb 13 18:19:49 UTC 2012 - dvaleev@suse.com Mon Feb 13 18:19:49 UTC 2012 - dvaleev@suse.com
- fix failed tests on ppc - fix failed tests on ppc
------------------------------------------------------------------- -------------------------------------------------------------------
Wed Feb 8 10:57:45 UTC 2012 - idonmez@suse.com Wed Feb 8 10:57:45 UTC 2012 - idonmez@suse.com
- Use %makeinstall to be SLES compatible - Use %makeinstall to be SLES compatible
------------------------------------------------------------------- -------------------------------------------------------------------
Thu Dec 22 11:27:05 UTC 2011 - werner@suse.de Thu Dec 22 11:27:05 UTC 2011 - werner@suse.de
- For SLES11 work around missing rpm macro - For SLES11 work around missing rpm macro
------------------------------------------------------------------- -------------------------------------------------------------------
Tue Dec 6 16:00:48 UTC 2011 - coolo@suse.com Tue Dec 6 16:00:48 UTC 2011 - coolo@suse.com
@ -475,8 +541,8 @@ Fri Sep 30 08:15:50 UTC 2011 - coolo@suse.com
------------------------------------------------------------------- -------------------------------------------------------------------
Tue Apr 19 13:23:09 UTC 2011 - idoenmez@novell.com Tue Apr 19 13:23:09 UTC 2011 - idoenmez@novell.com
- Add suport for xz and xar archives - Add suport for xz and xar archives
- Add libarchive-2.8.4-iso9660-data-types.patch: - Add libarchive-2.8.4-iso9660-data-types.patch:
fix ISO9660 reader data type mismatches fix ISO9660 reader data type mismatches
------------------------------------------------------------------- -------------------------------------------------------------------
@ -523,7 +589,7 @@ Sat Sep 6 17:54:11 CEST 2008 - mrueckert@suse.de
------------------------------------------------------------------- -------------------------------------------------------------------
Wed Aug 15 12:58:06 CEST 2007 - ro@suse.de Wed Aug 15 12:58:06 CEST 2007 - ro@suse.de
- fix dependency of devel package - fix dependency of devel package
------------------------------------------------------------------- -------------------------------------------------------------------
Tue Aug 7 16:47:22 CEST 2007 - mrueckert@suse.de Tue Aug 7 16:47:22 CEST 2007 - mrueckert@suse.de
@ -549,7 +615,7 @@ Mon Jul 30 14:31:32 CEST 2007 - mrueckert@suse.de
Fri Jun 8 01:35:37 CEST 2007 - ro@suse.de Fri Jun 8 01:35:37 CEST 2007 - ro@suse.de
- added ldconfig to post scripts - added ldconfig to post scripts
- remove minitar objects (leave binary there for now) - remove minitar objects (leave binary there for now)
------------------------------------------------------------------- -------------------------------------------------------------------
Sun Apr 8 20:53:59 CEST 2007 - mrueckert@suse.de Sun Apr 8 20:53:59 CEST 2007 - mrueckert@suse.de

10
libarchive.spec
View File

@ -1,7 +1,7 @@
# #
# spec file for package libarchive # spec file for package libarchive
# #
# Copyright (c) 2022 SUSE LLC # Copyright (c) 2023 SUSE LLC
# #
# All modifications and additions to the file contributed by third parties # All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed # remain the property of their copyright owners, unless otherwise agreed
@ -30,7 +30,7 @@
%bcond_without ext2fs %bcond_without ext2fs
%endif %endif
Name: libarchive Name: libarchive
Version: 3.7.0 Version: 3.7.2
Release: 0 Release: 0
Summary: Utility and C library to create and read several different streaming archive formats Summary: Utility and C library to create and read several different streaming archive formats
License: BSD-2-Clause License: BSD-2-Clause
@ -171,7 +171,11 @@ Static library for libarchive
%cmake_build %cmake_build
%check %check
%ctest exclude=""
%ifarch %arm %ix86 ppc s390
exclude="-E test_write_filter"
%endif
%ctest $exclude
%install %install
%cmake_install %cmake_install