Accepting request 1323012 from Archiving

OBS-URL: https://build.opensuse.org/request/show/1323012
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libarchive?expand=0&rev=61

libarchive-3.8.1.tar.xz.asc

@@ -1,14 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQGzBAABCgAdFiEE2yx88bTCZfrvVuP8WEihi48UGEsFAmg8rVcACgkQWEihi48U
-GEsW5wv/aI/LDzxpFqr9JU1RY3PAn9uRngxVx+SRX1tdCKpeSwfjhq4gyTHjhQt+
-nP0F1z3Lo+w7AHSOVm3/DNfv906qXQEVG5AoSiztFJqNKFA2cWs+2ZgnlHFGgsu/
-IQugr7duGIm+zuPukQwPtI6P7EFwNTH3mAkU+J+Kb5nKxR4bLtgt/FL9Hl7rQR6y
-5uq5ykPBeSLAHyugWi2Ie0uki8efCLO9ha1eIlGqIaavsvYfFvleCRgsghW9bQ+8
-NGsVKjO2RWfQsSlzszJQRZaIPdV4EIP4boqfIMS1GCxhXjMVkdeDC3x1Dql9iqV3
-0xAafErxHQiXB54vgrRkgeeLUoCxNkSLFYWQt1fwufZobGCmF+BwNnIUJe77uTRF
-Gg3Eqk7Fcs77whoSClA4HYs/LL+PH9uU7XHDenUzeQMpmzrXD8qiMsFnPUa0yyQa
-XCBp+f5bUI/LhDCkCkWf+Tzky2RQIqlSgqiFUoVVby7WiUHQLTVol6E2GGROusYN
-5s1paMN8
-=YxiC
------END PGP SIGNATURE-----

libarchive-3.8.4-tar-fix-tests.patch

@@ -0,0 +1,43 @@
+From 400598a59e2158deb7fe7d976db0c4b8e4becc0a Mon Sep 17 00:00:00 2001
+From: Martin Matuska <martin@matuska.de>
+Date: Mon, 8 Dec 2025 21:40:46 +0100
+Subject: [PATCH] tar: fix off-bounds read resulting from #2787 (3150539ed)
+
+---
+ tar/subst.c | 16 ++++++++--------
+ 1 file changed, 8 insertions(+), 8 deletions(-)
+
+diff --git a/tar/subst.c b/tar/subst.c
+index a466f6535..fff9a45c8 100644
+--- a/tar/subst.c
++++ b/tar/subst.c
+@@ -237,7 +237,7 @@ apply_substitution(struct bsdtar *bsdtar, const char *name, char **result,
+ 
+ 		char isEnd = 0;
+ 		do {
+-            isEnd = *name == '\0';
++			isEnd = *name == '\0';
+ 			if (regexec(&rule->re, name, 10, matches, 0))
+ 				break;
+ 
+@@ -293,13 +293,13 @@ apply_substitution(struct bsdtar *bsdtar, const char *name, char **result,
+ 
+ 			realloc_strcat(result, rule->result + j);
+ 			if (matches[0].rm_eo > 0) {
+-                name += matches[0].rm_eo;
+-            } else {
+-                // We skip a character because the match is 0-length
+-                // so we need to add it to the output
+-                realloc_strncat(result, name, 1);
+-                name += 1;
+-            }
++				name += matches[0].rm_eo;
++            		} else if (!isEnd) {
++				// We skip a character because the match is 0-length
++				// so we need to add it to the output
++				realloc_strncat(result, name, 1);
++				name += 1;
++			}
+ 		} while (rule->global && !isEnd); // Testing one step after because sed et al. run 0-length patterns a last time on the empty string at the end
+ 	}
+ 

libarchive-3.8.4.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c7b847b57feacf5e182f4d14dd6cae545ac6843d55cb725f58e107cdf1c9ad73
+size 6065584

libarchive-3.8.4.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=3ejk
+-----END PGP SIGNATURE-----

libarchive.changes

@@ -1,3 +1,51 @@
+-------------------------------------------------------------------
+Tue Dec  9 09:17:20 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Update to 3.8.4:
+  * bsdtar: Fix zero-length pattern issue
+  * lib: Fix regression introduced in libarchive 3.8.2 when walking
+    enterable but unreadable directories
+- add libarchive-3.8.4-tar-fix-tests.patch to fix tests
+
+-------------------------------------------------------------------
+Sat Nov 29 09:02:11 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Update to 3.8.3:
+  * lib: Create temporary files in the target directory
+    (boo#1254340)
+  * lha: Fix for an out-of-bounds buffer overrun when using
+    p[H_LEVEL_OFFSET] (boo#1254341)
+  * 7-zip: Fix a buffer overrun when reading truncated 7zip headers
+    (boo#1254342)
+  * lz4 and zstd: Support both lz4 and zstd data with leading
+    skippable frames
+- update upstream signing key
+
+-------------------------------------------------------------------
+Fri Oct 31 19:56:50 UTC 2025 - Adrian Schröter <adrian@suse.de>
+
+- update to 3.8.2:
+  Security fixes:
+   * 7zip: Fix out of boundary access
+   * tar reader: fix checking the result of the strftime (CVE-2025-25724)
+
+  Notable bugfixes:
+   * bsdtar: Allow filename to have CRLF endings
+   * lib: archive_read_data: handle sparse holes at end of file correctly
+   * lib: improve filter process handling
+   * lib: fix error checking in writing files
+   * lib: handle possible errors from system calls
+   * lib: avoid leaking file descriptors into subprocesses
+   * lib: parse_date: handle dates in 2038 and beyond if time_t is big enough
+   * RAR5 reader: fix multiple issues in extra field parsing function
+   * RAR5 reader: early fail when file declares data for a dir entry
+   * tar writer: fix replacing a regular file with a dir for ARCHIVE_EXTRACT_SAFE_WRITES
+   * tar reader (Windows): check WCS pathname in header_gnutar before overwriting
+   * tar reader: fix an infinite loop when parsing V headers
+   * zip writer: fix a memory leak if write callback error early
+   * zip writer: fix writing with ZSTD compression
+   * zstd write filter: enable Zstandard's checksum feature
+
 -------------------------------------------------------------------
 Thu Jun  5 21:05:40 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
 

libarchive.keyring

@@ -1,52 +1,82 @@
 -----BEGIN PGP PUBLIC KEY BLOCK-----
+Comment: 659C 84C0 E23E A1FA 97E0  B58C C040 B508 D63D 2B36
+Comment: Martin Matuska <martin@matuska.de>
+Comment: Martin Matuska <martin@matuska.org>
+Comment: Martin Matuska <mm@FreeBSD.org>
 
-mQGNBGOTSakBDADYnE8uP/uR+viUTGNdMG8tWtoopvEEACFOwqx6NPb9sXvip5z2
-0ochmO+jNqbV+OiS/6gjpd2f2fmJ241ooqbqZrWklabohbr2ros25bmi1C/77FEK
-sGulay334p1LXPxQA3kjEQSINMresnt8FYCO5q50VHgmnhSNaom8jPAy9S06fWqP
-yXAXoJ53hwzYN6Bgb2CnU5FTwC9O4v5sI4wjQYq5JC9cbl1hM5PzC5bIse79l5Nq
-YTsSuSY2RhOQ7w6L6V295l7C6TPkPBcqkg4Q+AYzdTTZagMN9NcchembtR/aMbuE
-xg1PiUMdPOu99uW605XikwwYTy0ZGlz7GZE9EcpoBaoSX5m3haM5k59e5839YtnC
-VbS0XOLCDp8uPMbLElGsLH6J1f1RxxV+h4r6ZypDSC0vTi54qI1nxsdJm1n21iwQ
-0zP77oLUaIc+Nb0Mmh61+YFPLMgeHlfEsnsYzTWJU/tt6rlFFECKSlBGkiIXy1Ie
-yKx2D+OlCZJ7FQMAEQEAAbQjTWFydGluIE1hdHVza2EgPG1hcnRpbkBtYXR1c2th
-Lm9yZz6JAdQEEwEKAD4WIQTbLHzxtMJl+u9W4/xYSKGLjxQYSwUCY5NMJAIbAwUJ
-BaOagAULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRBYSKGLjxQYS8wPDACGqLMh
-K5QGA3fjAY5GxEmYUOLB/0fwtCCsW9I1oVOkqdjR72c6iEKcPDcRpU1Xavncb/Kk
-N3kD/xQAVpNhn5tIfNAhflZIeB/2gsOv79qBKyo9SkM9TpdNd60H/uOEeYFA0fPF
-qXvrtdxK9gL3qkZtThvGnW49OlAHd8HvOMHCfCWMvJfwnt19PH/HR3cI3aXQHe3a
-Oek3+E4eKlCruOm0CM1OKfv6FuO79URSw2NB+Tskj2NW91jIF8iZXveR/qi1lupn
-AMLhXXpSJOmRGepKvfPRYoV7llSgSOdE+lElC6ljpe41T19c2PiVxUJOJmT4mtJo
-9ghVUeIkUhXNpAU/5I6QAtPoGQfQVcE23PtFM7gibC3nL7yPT8igi904msOIxoUk
-4kTOUCmW1KcGRT8SNnOrMkdEDGBg1QNNx7D/jyQf6umg4si3wu5NoVYr4eGorDxu
-J0Jq2wm42JQDnXWnmoQpO/XwaOwV+OIveMHd0jgtqYHsQiry8IpUWb/0is60H01h
-cnRpbiBNYXR1c2thIDxtbUBGcmVlQlNELm9yZz6JAdQEEwEKAD4WIQTbLHzxtMJl
-+u9W4/xYSKGLjxQYSwUCY5NJqQIbAwUJBaOagAULCQgHAgYVCgkICwIEFgIDAQIe
-AQIXgAAKCRBYSKGLjxQYS2z5DADN7TMpp246axc2NYYTzmHM1iN39EERH/gXT7dl
-+d9uY9i1dPZrtzuLoh/yQX8z3P/WeR2czSRWhkxqZ4R64oYiOq2VA1aJ9QopFKIi
-DA1mzTjDvuFiuhVR0484gxXf4N6peVhEoGZvUhLaR1n4L5ykAGwKLyqwOQqwK/BX
-jxDSgM45bCWhImE6yux6yNrOYTGZA0IsRShRoDbmXvPZPBxMvQEa8RnzI9QqxbZR
-17bNCt4VRYXUUpD1vAccJcLl1UGK12OSIevuUdv17Y05Da4IOhGHz9dXsojeFX4u
-S7h1JsGZFV4O7XyVpnF5qwqYukN/ScYg2QJIkm/Is3m2AVx58xh2twoFfBew6qID
-tnuWtzKlIqOlFST5nhSCaIAoGiVDEisXMY1ZffUJsugaKK6cufCw16dU9C3Kez4T
-ap5j1vkIdPylL7i631g7UnNvpi/5ZaxAB3yB00G0LKqTRGjqRAaXnCDuXA89brLF
-/wLqwsOROw6B1iQ/OyDhTPS0z6i5AY0EY5NJqQEMALs/XcCV+Xe34TA/eOWyQ4Qe
-qbNMdjNBxXW3gpapCG5pMKtlrN/elyYTPJHeas63VWWYyWEhpfb54gISyZOrkwU2
-S6kRtNSw4dADLDbMjfclB+EMKkF3rovhlBz5483PC5Dbw4KVIvZPgdWbAzUERBey
-XOlN2n5EQjcKcpuAlXlgR4ZtN9n1Po5SgCyjJbufIBxAho+Em1QoX+hne4eGfKf8
-o8feHbKibBqINj58GpCzyoyDDQ4NV+gRxU3AR85p2jNJrSrFELh7ZnHLTQvE1D9b
-/DRhRHDshTRTiAVHGrlCvhIQL1NnsOqqZUz4zv03CsPzMNfvgxlw8rvt1SIAZecC
-L9xz6P5zVb0svVq89Sc7S5AY7xQ7YhMf+fuG2ihpJFMAEBACypcqnLj0pdG1cZiv
-dx7Pw4Gd/sag5uUiRj+myPzOo5LpfbU8acmGEoemdZOsO1XO1ABJFOhXHY6cyLgD
-xk7sQvnlO2tTu1qvwPzKSr0XX6MfqUgtHwkELSnEVQARAQABiQG8BBgBCgAmFiEE
-2yx88bTCZfrvVuP8WEihi48UGEsFAmOTSakCGwwFCQWjmoAACgkQWEihi48UGEtO
-Hwv+Lht02gAsLxdqoMs5gBhC/jY2KMJhx/jrhCeIvdZWAZiBJ9wslqJkbhwF6tNt
-/x1BY8pam4j5enLkLCWyyp3wm0QWiJME0N3+tN5QMFpO5kMbFygCCIXSOd+kfrA1
-xFfQt840LTV1rzvp+YW8SYBFjWtanW4K49C7cewacZbY+zwsWZ/FV1bbEZGnB7lL
-0hiwOiXfjmxg0fVlEjLy7bt/8pxJ6w4wQsm78a4l3D2Oo1ux97Kcb+ymJvABmG7X
-Lc90uLbJFBiSbxxbVcbvHx55kGtEzttN+YzJuOTDgXHoFXL4wMTsyVlkzCw1m/qW
-uW68PO7RtXWl4C1aa6K/xC2jgiFT8IwppkEINeb2lIy96iyOPKD+NzocHBCcbx4W
-f9yXue8x8Bptr5Pzv1G422yRLv4N9Hdb3fSALs1FCjVJFuov3FPjpKz6YhyY0vLj
-PNcYqehQphtFs0ra8+OkupcNBiAYsPUlMGhFQakPxpEl4/IM5dny0YrtTuYJAdrI
-HXDL
-=weXn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+=Bisa
 -----END PGP PUBLIC KEY BLOCK-----

libarchive.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package libarchive
 #
-# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2025 SUSE LLC and contributors
 # Copyright (c) 2025 Andreas Stieger <Andreas.Stieger@gmx.de>
 #
 # All modifications and additions to the file contributed by third parties
@@ -20,7 +20,7 @@
 %define somajor 13
 %define libname libarchive%{somajor}
 Name:           libarchive
-Version:        3.8.1
+Version:        3.8.4
 Release:        0
 Summary:        Utility and C library to create and read several streaming archive formats
 License:        BSD-2-Clause
@@ -30,6 +30,9 @@ Source0:        https://github.com/libarchive/libarchive/releases/download/v%{ve
 Source1:        https://github.com/libarchive/libarchive/releases/download/v%{version}/libarchive-%{version}.tar.xz.asc
 Source2:        libarchive.keyring
 Source1000:     baselibs.conf
+# https://github.com/libarchive/libarchive/issues/2804
+# https://github.com/libarchive/libarchive/pull/2809
+Patch0:         libarchive-3.8.4-tar-fix-tests.patch
 BuildRequires:  cmake
 BuildRequires:  ninja
 BuildRequires:  pkgconfig