[whinlatter,09/47] libarchive: upgrade 3.8.5 -> 3.8.6

Message ID	4f873ad9abb1c10d0dc41f219f4a8ae5b8b1d53c.1776321810.git.yoann.congal@smile.fr
State	RFC, archived
Delegated to:	Yoann Congal
Headers	show Return-Path: <yoann.congal@smile.fr> ip: 209.85.221.65, mailfrom: yoann.congal@smile.fr) From: Yoann Congal <yoann.congal@smile.fr> To: openembedded-core@lists.openembedded.org Subject: [OE-core][whinlatter 09/47] libarchive: upgrade 3.8.5 -> 3.8.6 Date: Thu, 16 Apr 2026 08:47:10 +0200 Message-ID: <4f873ad9abb1c10d0dc41f219f4a8ae5b8b1d53c.1776321810.git.yoann.congal@smile.fr> In-Reply-To: <cover.1776321810.git.yoann.congal@smile.fr> References: <cover.1776321810.git.yoann.congal@smile.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[whinlatter,01/47] binutils: mark CVE-2025-69650 and CVE-2025-69651 as disputed \| expand [whinlatter,01/47] binutils: mark CVE-2025-69650 and CVE-2025-69651 as disputed [whinlatter,02/47] binutils: Fix CVE-2025-69648 [whinlatter,03/47] binutils: Fix CVE-2025-69644 CVE-2025-69647 [whinlatter,04/47] binutils: Fix CVE-2025-69649 [whinlatter,05/47] binutils: Fix CVE-2025-69652 [whinlatter,06/47] nfs-utils: Fix CVE-2025-12801 [whinlatter,07/47] sqlite3: Fix CVE-2025-70873 [whinlatter,08/47] python3: upgrade 3.13.11 -> 3.13.12 [whinlatter,09/47] libarchive: upgrade 3.8.5 -> 3.8.6 [whinlatter,10/47] vim: Fix CVE-2026-33412 [whinlatter,11/47] vim: Fix CVE-2026-28418 [whinlatter,12/47] vim: Fix CVE-2026-28419 [whinlatter,13/47] binutils: Fix build with GLIBC 2.43 on the host [whinlatter,14/47] gcc: backport a fix for building with gcc-16 [whinlatter,15/47] barebox/barebox-tools: upgrade 2025.09.0 -> 2025.09.3 [whinlatter,16/47] openssl: upgrade 3.5.5 -> 3.5.6 [whinlatter,17/47] go: upgrade 1.25.8 -> 1.25.9 [whinlatter,18/47] dtc: backport fix for build with glibc-2.43 [whinlatter,19/47] pseudo: Add fix for glibc 2.43 [whinlatter,20/47] yocto-uninative: Update to 5.1 for glibc 2.43 [whinlatter,21/47] m4: backport 3 gnulib changes to fix build with glibc-2.43 on host [whinlatter,22/47] gettext: backport gnulib changes to fix build with glibc-2.43 on host [whinlatter,23/47] util-linux: backport fix to build with glibc-2.43 on host [whinlatter,24/47] systemd: backport fix to build with glibc-2.43 on host [whinlatter,25/47] virglrenderer: Fix build with glibc 2.43+ [whinlatter,26/47] libxcrypt: avoid discarded-qualifiers build failure with glibc 2.43 [whinlatter,27/47] libxcrypt: Fix build wrt C23 support [whinlatter,28/47] libxcrypt: Use configure knob to disable warnings as errors [whinlatter,29/47] glibc: stable 2.42 branch updates [whinlatter,30/47] spirv-tools: backport a fix for building with gcc-16 [whinlatter,31/47] ovmf: backport a fix for build with gcc-16 [whinlatter,32/47] libpng: upgrade 1.6.55 -> 1.6.56 [whinlatter,33/47] recipetool: Recognise https://git. as git urls [whinlatter,34/47] selftest/scripts: Update old git protocol references [whinlatter,35/47] archiver: Don't try to preserve all attributes when copying files [whinlatter,36/47] license.py: Drop visit_Str from SeenVisitor in selftest [whinlatter,37/47] oeqa/selftest/devtool: add vulkan feature check for test needing it [whinlatter,38/47] selftest/minidebuginfo: extract files from tar archive using tarfile module [whinlatter,39/47] selftest/gdbserver: replace shutil.unpack_archive with tarfile extract [whinlatter,40/47] oeqa/selftest: add wayland feature check for tests needing it [whinlatter,41/47] report-error.bbclass: replace 'codecs.open()' with 'open()' [whinlatter,42/47] oeqa/sdk: Default to https git protocol for YP/OE repos [whinlatter,43/47] scripts: Default to https git protocol for YP/OE repos [whinlatter,44/47] oeqa/selftest/git-submodule-test: Default to https git protocol for YP/OE repos [whinlatter,45/47] meta/files/layers.example.json: switch to https clone URIs [whinlatter,46/47] build-appliance-image: switch SRC_URI to https protocol [whinlatter,47/47] scripts/install-buildtools: Update to 5.3.3

Message ID

4f873ad9abb1c10d0dc41f219f4a8ae5b8b1d53c.1776321810.git.yoann.congal@smile.fr

State

RFC, archived

Delegated to:

Yoann Congal

Headers

From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][whinlatter 09/47] libarchive: upgrade 3.8.5 -> 3.8.6
Date: Thu, 16 Apr 2026 08:47:10 +0200
Message-ID: 
 <4f873ad9abb1c10d0dc41f219f4a8ae5b8b1d53c.1776321810.git.yoann.congal@smile.fr>
In-Reply-To: <cover.1776321810.git.yoann.congal@smile.fr>
References: <cover.1776321810.git.yoann.congal@smile.fr>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[whinlatter,01/47] binutils: mark CVE-2025-69650 and CVE-2025-69651 as disputed | expand

Commit Message

Yoann Congal April 16, 2026, 6:47 a.m. UTC

From: Peter Marko <peter.marko@siemens.com>

Release information [1]:

Libarchive 3.8.6 is a security and bugfix release.

Notable fixes:
* libarchive: fix incompatibility with Nettle 4.x (#2858)
* libarchive: fix NULL pointer dereference in archive_acl_from_text_w() (#2859)
* bsdunzip: fix ISO week year and Gregorian year confusion (#2860)
* 7zip: ix SEGV in check_7zip_header_in_sfx via ELF offset validation (#2864)
* 7zip: fix out-of-bounds access on ELF 64-bit header (#2875)
* RAR5 reader: fix infinite loop in rar5 decompression (#2877)
* RAR5 reader: fix potential memory leak (#2892)
* RAR5: fix SIGSEGV when archive_read_support_format_rar5 is called twice (#2893)
* CAB reader: fix memory leak on repeated calls to archive_read_support_format_cab (#2895)
* mtree reader: Fix file descriptor leak in mtree parser cleanup (CWE-775, #2878)
* various small bugfixes in code and documentation

[1] https://github.com/libarchive/libarchive/releases/tag/v3.8.6

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 9e5d18040b0999dbfaea09b8a8a9f8a4bcac6349)
Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
---
 .../libarchive/{libarchive_3.8.5.bb => libarchive_3.8.6.bb}     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-extended/libarchive/{libarchive_3.8.5.bb => libarchive_3.8.6.bb} (96%)

diff --git a/meta/recipes-extended/libarchive/libarchive_3.8.5.bb b/meta/recipes-extended/libarchive/libarchive_3.8.6.bb
similarity index 96%
rename from meta/recipes-extended/libarchive/libarchive_3.8.5.bb
rename to meta/recipes-extended/libarchive/libarchive_3.8.6.bb
index fcfaf5d2313..c984eb78401 100644
--- a/meta/recipes-extended/libarchive/libarchive_3.8.5.bb
+++ b/meta/recipes-extended/libarchive/libarchive_3.8.6.bb
@@ -32,7 +32,7 @@  EXTRA_OECONF += "--enable-largefile --without-iconv"
 SRC_URI = "https://libarchive.org/downloads/libarchive-${PV}.tar.gz"
 UPSTREAM_CHECK_URI = "https://www.libarchive.org/"
 
-SRC_URI[sha256sum] = "8a60f3a7bfd59c54ce82ae805a93dba65defd04148c3333b7eaa2102f03b7ffd"
+SRC_URI[sha256sum] = "213269b05aac957c98f6e944774bb438d0bd168a2ec60b9e4f8d92035925821c"
 
 inherit autotools update-alternatives pkgconfig

[whinlatter,09/47] libarchive: upgrade 3.8.5 -> 3.8.6

Commit Message

Patch