[whinlatter,v2,02/29] libarchive: upgrade 3.8.2 -> 3.8.3

Message ID	20251219032209.960840-3-ankur.tyagi85@gmail.com
State	New
Headers	show Return-Path: <ankur.tyagi85@gmail.com> ip: 209.85.210.176, mailfrom: ankur.tyagi85@gmail.com) From: ankur.tyagi85@gmail.com To: openembedded-core@lists.openembedded.org Cc: Peter Marko <peter.marko@siemens.com>, Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>, Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [OE-core][whinlatter][PATCH v2 02/29] libarchive: upgrade 3.8.2 -> 3.8.3 Date: Fri, 19 Dec 2025 08:51:41 +0530 Message-ID: <20251219032209.960840-3-ankur.tyagi85@gmail.com> In-Reply-To: <20251219032209.960840-1-ankur.tyagi85@gmail.com> References: <20251219032209.960840-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	Updates for Whinlatter \| expand [whinlatter,v2,00/29] Updates for Whinlatter [whinlatter,v2,01/29] libxmlb: upgrade 0.3.23 -> 0.3.24 [whinlatter,v2,02/29] libarchive: upgrade 3.8.2 -> 3.8.3 [whinlatter,v2,03/29] glib-2.0: Upgrade 2.86.0 -> 2.86.1 [whinlatter,v2,04/29] ell: upgrade 0.79 -> 0.80 [whinlatter,v2,05/29] spirv-llvm-translator: Upgrade to 21.1.2 [whinlatter,v2,06/29] gst-devtools: upgrade 1.26.5 -> 1.26.7 [whinlatter,v2,07/29] gst-examples: upgrade 1.26.5 -> 1.26.7 [whinlatter,v2,08/29] gstreamer1.0-libav: upgrade 1.26.5 -> 1.26.7 [whinlatter,v2,09/29] gstreamer1.0-plugins-bad: upgrade 1.26.5 -> 1.26.7 [whinlatter,v2,10/29] gstreamer1.0-plugins-base: upgrade 1.26.5 -> 1.26.7 [whinlatter,v2,11/29] gstreamer1.0-plugins-good: upgrade 1.26.5 -> 1.26.7 [whinlatter,v2,12/29] gstreamer1.0-plugins-ugly: upgrade 1.26.5 -> 1.26.7 [whinlatter,v2,13/29] gstreamer1.0-python: upgrade 1.26.5 -> 1.26.7 [whinlatter,v2,14/29] gstreamer1.0-rtsp-server: upgrade 1.26.5 -> 1.26.7 [whinlatter,v2,15/29] gstreamer1.0: upgrade 1.26.5 -> 1.26.7 [whinlatter,v2,16/29] gstreamer1.0-vaapi: upgrade 1.26.5 -> 1.26.7 [whinlatter,v2,17/29] go: upgrade 1.25.4 -> 1.25.5 [whinlatter,v2,18/29] enchant2: upgrade 2.8.12 -> 2.8.14 [whinlatter,v2,19/29] libpng: upgrade 1.6.50 -> 1.6.51 [whinlatter,v2,20/29] llvm/clang: Upgrade to 21.1.6 release [whinlatter,v2,21/29] llvm/clang: Upgrade to 21.1.7 release [whinlatter,v2,22/29] mesa: upgrade 25.2.5 -> 25.2.8 [whinlatter,v2,23/29] e2fsprogs: misc/create_inode.c: Fix for file larger than 2GB [whinlatter,v2,24/29] ccache: upgrade 4.12 -> 4.12.1 [whinlatter,v2,25/29] ccache: 4.12.1 -> 4.12.2 [whinlatter,v2,26/29] gnutls: patch CVE-2025-9820 [whinlatter,v2,27/29] cups: upgrade from 2.4.14 to 2.4.15 [whinlatter,v2,28/29] sqlite3: patch CVE-2025-3277 [whinlatter,v2,29/29] sqlite3: patch CVE-2025-6965

Message ID

20251219032209.960840-3-ankur.tyagi85@gmail.com

State

New

Headers

From: ankur.tyagi85@gmail.com
To: openembedded-core@lists.openembedded.org
Cc: Peter Marko <peter.marko@siemens.com>,
	Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>,
	Ankur Tyagi <ankur.tyagi85@gmail.com>
Subject: [OE-core][whinlatter][PATCH v2 02/29] libarchive: upgrade 3.8.2 ->
 3.8.3
Date: Fri, 19 Dec 2025 08:51:41 +0530
Message-ID: <20251219032209.960840-3-ankur.tyagi85@gmail.com>
In-Reply-To: <20251219032209.960840-1-ankur.tyagi85@gmail.com>
References: <20251219032209.960840-1-ankur.tyagi85@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

Updates for Whinlatter | expand

Commit Message

Ankur Tyagi Dec. 19, 2025, 3:21 a.m. UTC

From: Peter Marko <peter.marko@siemens.com>

Release Notes [1]:
Libarchive 3.8.3 is a bugfix and security release.
Security fixes:
* lib: Create temporary files in the target directory (#2753)
* lha: Fix for an out-of-bounds buffer overrun when using p[H_LEVEL_OFFSET] (#2768)
* 7-zip: Fix a buffer overrun when reading truncated 7zip headers (#2769)
Notable bugxies:
* lz4 and zstd: Support both lz4 and zstd data with leading skippable frames (#2771)
Full Changelog: [2]

[1] https://github.com/libarchive/libarchive/releases/tag/v3.8.3
[2] https://github.com/libarchive/libarchive/compare/v3.8.2...v3.8.3

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
(cherry picked from commit 4b32b43a607bf708e5433366a3ef6cbcd5b8b221)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 .../libarchive/{libarchive_3.8.2.bb => libarchive_3.8.3.bb}     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-extended/libarchive/{libarchive_3.8.2.bb => libarchive_3.8.3.bb} (96%)

diff --git a/meta/recipes-extended/libarchive/libarchive_3.8.2.bb b/meta/recipes-extended/libarchive/libarchive_3.8.3.bb
similarity index 96%
rename from meta/recipes-extended/libarchive/libarchive_3.8.2.bb
rename to meta/recipes-extended/libarchive/libarchive_3.8.3.bb
index d4f367009a..e3706ba3bb 100644
--- a/meta/recipes-extended/libarchive/libarchive_3.8.2.bb
+++ b/meta/recipes-extended/libarchive/libarchive_3.8.3.bb
@@ -32,7 +32,7 @@  EXTRA_OECONF += "--enable-largefile --without-iconv"
 SRC_URI = "https://libarchive.org/downloads/libarchive-${PV}.tar.gz"
 UPSTREAM_CHECK_URI = "https://www.libarchive.org/"
 
-SRC_URI[sha256sum] = "5f2d3c2fde8dc44583a61165549dc50ba8a37c5947c90fc02c8e5ce7f1cfb80d"
+SRC_URI[sha256sum] = "a290c2d82bce7b806d1e5309558a7bd0ef39067a868f4622a0e32e71a4de8cb6"
 
 inherit autotools update-alternatives pkgconfig

[whinlatter,v2,02/29] libarchive: upgrade 3.8.2 -> 3.8.3

Commit Message

Patch