pool/libarchive
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 403845 from Archiving

Browse Source 
I HATE TO FIGHT AGAINS AUTO REQUEST CHECKS WHICH COULD BE DONE BY LOCAL SOURCE CHECKSosc ci -m grrosc ci -m grr

OBS-URL: https://build.opensuse.org/request/show/403845
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libarchive?expand=0&rev=24
This commit is contained in:
Dominique Leuenberger 2016-07-09 07:18:36 +00:00 committed by Git OBS Bridge
commit d22e4cfca5
5 changed files with 45 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
fix-build.patch Normal file
View File

@ -0,0 +1,20 @@
--- libarchive/test/test_write_format_gnutar_filenames.c.orig 2016-06-20 13:03:13.796386223 +0200
+++ libarchive/test/test_write_format_gnutar_filenames.c 2016-06-20 13:04:19.472387624 +0200
@@ -55,7 +55,7 @@
archive_entry_set_mode(template, S_IFREG | 0755);
archive_entry_set_size(template, 8);
- for (int i = 0; i < 2000; ++i) {
+ int i; for (i = 0; i < 2000; ++i) {
filename[i] = 'a';
filename[i + 1] = '\0';
archive_entry_copy_pathname(template, filename);
@@ -110,7 +110,7 @@
archive_entry_set_mode(template, S_IFLNK | 0755);
archive_entry_copy_pathname(template, "link");
- for (int i = 0; i < 2000; ++i) {
+ int i; for (i = 0; i < 2000; ++i) {
filename[i] = 'a';
filename[i + 1] = '\0';
archive_entry_copy_symlink(template, filename);

3
libarchive-3.2.0.tar.gz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:7bce45fd71ff01dc20d19edd78322d4965583d81b8bed8e26cacb65d6f5baa87
size 5448095

3
libarchive-3.2.1.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:72ee1a4e3fd534525f13a0ba1aa7b05b203d186e0c6072a8a4738649d0b3cfd2
size 5448888

15
libarchive.changes
View File

@ -1,3 +1,17 @@
-------------------------------------------------------------------
Mon Jun 20 10:31:43 UTC 2016 - adrian@suse.de
- update to version 3.2.1
Fixes a number of security issues:
CVE-2015-8934, CVE-2015-8933, CVE-2015-8917, CVE-2016-4301, CVE-2016-4300
- and fixing the build (fix-build.patch)
-------------------------------------------------------------------
Thu Jun 16 09:33:17 UTC 2016 - adrian@suse.de
- limit size of symlinks in cpio archives (CVE-2016-4809, boo#984990)
CVE-2016-4809.patch
-------------------------------------------------------------------
Mon May 9 08:42:19 UTC 2016 - adrian@suse.de
@ -5,6 +19,7 @@ Mon May 9 08:42:19 UTC 2016 - adrian@suse.de
- update to version 3.2.0
* Fixes CVE-2016-1541
* Fixes CVE-2015-8928
* changes are only documented in git history
* updated openssl patch
* new bsdcat utility

8
libarchive.spec
View File

@ -33,7 +33,7 @@
%define libname libarchive%{somajor}
Name: libarchive
Version: 3.2.0
Version: 3.2.1
Release: 0
Summary: Creates and reads several different streaming archive formats
License: BSD-2-Clause
@ -41,6 +41,7 @@ Group: Productivity/Archiving/Compression
Url: http://www.libarchive.org/
Source0: http://www.libarchive.org/downloads/libarchive-%{version}.tar.gz
Source1: baselibs.conf
Patch1: fix-build.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: libacl-devel
BuildRequires: libbz2-devel
@ -164,6 +165,7 @@ static library for libarchive
%if %{with openssl}
%patch0 -p0
%endif
%patch1 -p0
%build
%if !0%{?skip_autoreconf}
@ -176,6 +178,10 @@ autoreconf -fiv
--disable-static \
%endif
--enable-bsdcpio
# lzma mt detection is broken
sed -i -e "/HAVE_LZMA_STREAM_ENCODER_MT/d" config.h
make %{?_smp_mflags}
%check