From 71583be8c6698420a345db805403fbea2120ba2c1a4bb58115e6975131fa54d8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Adrian=20Schr=C3=B6ter?= Date: Wed, 26 Oct 2016 09:33:16 +0000 Subject: [PATCH 1/3] try OBS-URL: https://build.opensuse.org/package/show/Archiving/libarchive?expand=0&rev=62 --- libarchive-3.2.1.tar.gz | 3 --- libarchive-3.2.2.tar.gz | 3 +++ libarchive.changes | 6 ++++++ libarchive.spec | 2 +- 4 files changed, 10 insertions(+), 4 deletions(-) delete mode 100644 libarchive-3.2.1.tar.gz create mode 100644 libarchive-3.2.2.tar.gz diff --git a/libarchive-3.2.1.tar.gz b/libarchive-3.2.1.tar.gz deleted file mode 100644 index 07cc3d8..0000000 --- a/libarchive-3.2.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:72ee1a4e3fd534525f13a0ba1aa7b05b203d186e0c6072a8a4738649d0b3cfd2 -size 5448888 diff --git a/libarchive-3.2.2.tar.gz b/libarchive-3.2.2.tar.gz new file mode 100644 index 0000000..dd0c074 --- /dev/null +++ b/libarchive-3.2.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:691c194ee132d1f0f7a42541f091db811bc2e56f7107e9121be2bc8c04f1060f +size 5458241 diff --git a/libarchive.changes b/libarchive.changes index 58389cf..9e047ee 100644 --- a/libarchive.changes +++ b/libarchive.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Wed Oct 26 09:27:32 UTC 2016 - adrian@suse.com + +- update to version 3.2.2 + Unspecified security fixes + ------------------------------------------------------------------- Sat Jul 23 21:13:34 UTC 2016 - dmueller@suse.com diff --git a/libarchive.spec b/libarchive.spec index 2b74e67..aa6b8a2 100644 --- a/libarchive.spec +++ b/libarchive.spec @@ -33,7 +33,7 @@ %define libname libarchive%{somajor} Name: libarchive -Version: 3.2.1 +Version: 3.2.2 Release: 0 Summary: Creates and reads several different streaming archive formats License: BSD-2-Clause From 7ce5328b34d9e4672cfa9025bce7c3127278fe3733aa94c2f8b60f8e105e7b77 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Adrian=20Schr=C3=B6ter?= Date: Wed, 26 Oct 2016 09:37:33 +0000 Subject: [PATCH 2/3] go OBS-URL: https://build.opensuse.org/package/show/Archiving/libarchive?expand=0&rev=63 --- fix-build.patch | 20 -------------------- libarchive.changes | 1 + libarchive.spec | 2 -- 3 files changed, 1 insertion(+), 22 deletions(-) delete mode 100644 fix-build.patch diff --git a/fix-build.patch b/fix-build.patch deleted file mode 100644 index d34b777..0000000 --- a/fix-build.patch +++ /dev/null @@ -1,20 +0,0 @@ ---- libarchive/test/test_write_format_gnutar_filenames.c.orig 2016-06-20 13:03:13.796386223 +0200 -+++ libarchive/test/test_write_format_gnutar_filenames.c 2016-06-20 13:04:19.472387624 +0200 -@@ -55,7 +55,7 @@ - archive_entry_set_mode(template, S_IFREG | 0755); - archive_entry_set_size(template, 8); - -- for (int i = 0; i < 2000; ++i) { -+ int i; for (i = 0; i < 2000; ++i) { - filename[i] = 'a'; - filename[i + 1] = '\0'; - archive_entry_copy_pathname(template, filename); -@@ -110,7 +110,7 @@ - archive_entry_set_mode(template, S_IFLNK | 0755); - archive_entry_copy_pathname(template, "link"); - -- for (int i = 0; i < 2000; ++i) { -+ int i; for (i = 0; i < 2000; ++i) { - filename[i] = 'a'; - filename[i + 1] = '\0'; - archive_entry_copy_symlink(template, filename); diff --git a/libarchive.changes b/libarchive.changes index 9e047ee..64e65f9 100644 --- a/libarchive.changes +++ b/libarchive.changes @@ -3,6 +3,7 @@ Wed Oct 26 09:27:32 UTC 2016 - adrian@suse.com - update to version 3.2.2 Unspecified security fixes +- obsoletes fix-build.patch ------------------------------------------------------------------- Sat Jul 23 21:13:34 UTC 2016 - dmueller@suse.com diff --git a/libarchive.spec b/libarchive.spec index aa6b8a2..f045574 100644 --- a/libarchive.spec +++ b/libarchive.spec @@ -41,7 +41,6 @@ Group: Productivity/Archiving/Compression Url: http://www.libarchive.org/ Source0: http://www.libarchive.org/downloads/libarchive-%{version}.tar.gz Source1: baselibs.conf -Patch1: fix-build.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: libacl-devel BuildRequires: libbz2-devel @@ -166,7 +165,6 @@ static library for libarchive %if %{with openssl} %patch0 -p0 %endif -%patch1 -p0 %build %if !0%{?skip_autoreconf} From 102c3443fcc89a1e648ef90babcf842a2c6800eff8080d5394fb48c5f474acb5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Adrian=20Schr=C3=B6ter?= Date: Wed, 26 Oct 2016 09:45:51 +0000 Subject: [PATCH 3/3] fix file list OBS-URL: https://build.opensuse.org/package/show/Archiving/libarchive?expand=0&rev=64 --- libarchive.changes | 8 +++++++- libarchive.spec | 2 +- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/libarchive.changes b/libarchive.changes index 64e65f9..b4aff5d 100644 --- a/libarchive.changes +++ b/libarchive.changes @@ -2,7 +2,13 @@ Wed Oct 26 09:27:32 UTC 2016 - adrian@suse.com - update to version 3.2.2 - Unspecified security fixes + Unspecified security fixes, but at least: + * CVE-2016-8687.patch: bsc#1005070 + * CVE-2016-8689.patch: bsc#1005072 + * CVE-2016-8688.patch: bsc#1005076 + * CVE-2016-5844.patch: bsc#986566, upstream issue 717 + * CVE-2016-6250.patch: bsc#989980, upstream issue 711 + * CVE-2016-5418.patch: bsc#998677, upstream issues 744, 745 and 746 - obsoletes fix-build.patch ------------------------------------------------------------------- diff --git a/libarchive.spec b/libarchive.spec index f045574..3858f82 100644 --- a/libarchive.spec +++ b/libarchive.spec @@ -206,7 +206,7 @@ sed -i -e '/Libs.private/d' %{buildroot}%{_libdir}/pkgconfig/libarchive.pc %files -n %{libname} %defattr(-,root,root) -%doc COPYING NEWS README +%doc COPYING NEWS %{_libdir}/libarchive.so.* %files -n libarchive-devel