[whinlatter,v2,09/51] libarchive: upgrade 3.8.5 -> 3.8.6

Message ID	4f873ad9abb1c10d0dc41f219f4a8ae5b8b1d53c.1776377993.git.yoann.congal@smile.fr
State	RFC, archived
Delegated to:	Yoann Congal
Headers	show Return-Path: <yoann.congal@smile.fr> ip: 209.85.128.67, mailfrom: yoann.congal@smile.fr) From: Yoann Congal <yoann.congal@smile.fr> To: openembedded-core@lists.openembedded.org Subject: [OE-core][whinlatter v2 09/51] libarchive: upgrade 3.8.5 -> 3.8.6 Date: Fri, 17 Apr 2026 00:29:52 +0200 Message-ID: <4f873ad9abb1c10d0dc41f219f4a8ae5b8b1d53c.1776377993.git.yoann.congal@smile.fr> In-Reply-To: <cover.1776377993.git.yoann.congal@smile.fr> References: <cover.1776377993.git.yoann.congal@smile.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[whinlatter,v2,01/51] binutils: mark CVE-2025-69650 and CVE-2025-69651 as disputed \| expand [whinlatter,v2,01/51] binutils: mark CVE-2025-69650 and CVE-2025-69651 as disputed [whinlatter,v2,02/51] binutils: Fix CVE-2025-69648 [whinlatter,v2,03/51] binutils: Fix CVE-2025-69644 CVE-2025-69647 [whinlatter,v2,04/51] binutils: Fix CVE-2025-69649 [whinlatter,v2,05/51] binutils: Fix CVE-2025-69652 [whinlatter,v2,06/51] nfs-utils: Fix CVE-2025-12801 [whinlatter,v2,07/51] sqlite3: Fix CVE-2025-70873 [whinlatter,v2,08/51] python3: upgrade 3.13.11 -> 3.13.12 [whinlatter,v2,09/51] libarchive: upgrade 3.8.5 -> 3.8.6 [whinlatter,v2,10/51] vim: Fix CVE-2026-33412 [whinlatter,v2,11/51] vim: Fix CVE-2026-28418 [whinlatter,v2,12/51] vim: Fix CVE-2026-28419 [whinlatter,v2,13/51] binutils: Fix build with GLIBC 2.43 on the host [whinlatter,v2,14/51] gcc: backport a fix for building with gcc-16 [whinlatter,v2,15/51] barebox/barebox-tools: upgrade 2025.09.0 -> 2025.09.3 [whinlatter,v2,16/51] openssl: upgrade 3.5.5 -> 3.5.6 [whinlatter,v2,17/51] go: upgrade 1.25.8 -> 1.25.9 [whinlatter,v2,18/51] dtc: backport fix for build with glibc-2.43 [whinlatter,v2,19/51] pseudo: Add fix for glibc 2.43 [whinlatter,v2,20/51] yocto-uninative: Update to 5.1 for glibc 2.43 [whinlatter,v2,21/51] m4: backport 3 gnulib changes to fix build with glibc-2.43 on host [whinlatter,v2,22/51] gettext: backport gnulib changes to fix build with glibc-2.43 on host [whinlatter,v2,23/51] util-linux: backport fix to build with glibc-2.43 on host [whinlatter,v2,24/51] systemd: backport fix to build with glibc-2.43 on host [whinlatter,v2,25/51] virglrenderer: Fix build with glibc 2.43+ [whinlatter,v2,26/51] libxcrypt: avoid discarded-qualifiers build failure with glibc 2.43 [whinlatter,v2,27/51] libxcrypt: Fix build wrt C23 support [whinlatter,v2,28/51] libxcrypt: Use configure knob to disable warnings as errors [whinlatter,v2,29/51] glibc: stable 2.42 branch updates [whinlatter,v2,30/51] spirv-tools: backport a fix for building with gcc-16 [whinlatter,v2,31/51] ovmf: backport a fix for build with gcc-16 [whinlatter,v2,32/51] libpng: upgrade 1.6.55 -> 1.6.56 [whinlatter,v2,33/51] recipetool: Recognise https://git. as git urls [whinlatter,v2,34/51] selftest/scripts: Update old git protocol references [whinlatter,v2,35/51] archiver: Don't try to preserve all attributes when copying files [whinlatter,v2,36/51] license.py: Drop visit_Str from SeenVisitor in selftest [whinlatter,v2,37/51] oeqa/selftest/devtool: add vulkan feature check for test needing it [whinlatter,v2,38/51] selftest/minidebuginfo: extract files from tar archive using tarfile module [whinlatter,v2,39/51] selftest/gdbserver: replace shutil.unpack_archive with tarfile extract [whinlatter,v2,40/51] oeqa/selftest: add wayland feature check for tests needing it [whinlatter,v2,41/51] report-error.bbclass: replace 'codecs.open()' with 'open()' [whinlatter,v2,42/51] oeqa/sdk: Default to https git protocol for YP/OE repos [whinlatter,v2,43/51] scripts: Default to https git protocol for YP/OE repos [whinlatter,v2,44/51] oeqa/selftest/git-submodule-test: Default to https git protocol for YP/OE rep… [whinlatter,v2,45/51] meta/files/layers.example.json: switch to https clone URIs [whinlatter,v2,46/51] build-appliance-image: switch SRC_URI to https protocol [whinlatter,v2,47/51] scripts/install-buildtools: Update to 5.3.3 [whinlatter,v2,48/51] binutils: Upgrade to 2.45.1 release [whinlatter,v2,49/51] ptest-runner: Upgrade 2.4.5.1 -> 2.5.0 [whinlatter,v2,50/51] ptest-runner: Use git tag in SRC_URI [whinlatter,v2,51/51] ptest-runner: Upgrade 2.5.0 -> 2.5.1

Message ID

4f873ad9abb1c10d0dc41f219f4a8ae5b8b1d53c.1776377993.git.yoann.congal@smile.fr

State

RFC, archived

Delegated to:

Yoann Congal

Headers

From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][whinlatter v2 09/51] libarchive: upgrade 3.8.5 -> 3.8.6
Date: Fri, 17 Apr 2026 00:29:52 +0200
Message-ID: 
 <4f873ad9abb1c10d0dc41f219f4a8ae5b8b1d53c.1776377993.git.yoann.congal@smile.fr>
In-Reply-To: <cover.1776377993.git.yoann.congal@smile.fr>
References: <cover.1776377993.git.yoann.congal@smile.fr>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[whinlatter,v2,01/51] binutils: mark CVE-2025-69650 and CVE-2025-69651 as disputed | expand

Commit Message

Yoann Congal April 16, 2026, 10:29 p.m. UTC

From: Peter Marko <peter.marko@siemens.com>

Release information [1]:

Libarchive 3.8.6 is a security and bugfix release.

Notable fixes:
* libarchive: fix incompatibility with Nettle 4.x (#2858)
* libarchive: fix NULL pointer dereference in archive_acl_from_text_w() (#2859)
* bsdunzip: fix ISO week year and Gregorian year confusion (#2860)
* 7zip: ix SEGV in check_7zip_header_in_sfx via ELF offset validation (#2864)
* 7zip: fix out-of-bounds access on ELF 64-bit header (#2875)
* RAR5 reader: fix infinite loop in rar5 decompression (#2877)
* RAR5 reader: fix potential memory leak (#2892)
* RAR5: fix SIGSEGV when archive_read_support_format_rar5 is called twice (#2893)
* CAB reader: fix memory leak on repeated calls to archive_read_support_format_cab (#2895)
* mtree reader: Fix file descriptor leak in mtree parser cleanup (CWE-775, #2878)
* various small bugfixes in code and documentation

[1] https://github.com/libarchive/libarchive/releases/tag/v3.8.6

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 9e5d18040b0999dbfaea09b8a8a9f8a4bcac6349)
Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
---
 .../libarchive/{libarchive_3.8.5.bb => libarchive_3.8.6.bb}     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-extended/libarchive/{libarchive_3.8.5.bb => libarchive_3.8.6.bb} (96%)

diff --git a/meta/recipes-extended/libarchive/libarchive_3.8.5.bb b/meta/recipes-extended/libarchive/libarchive_3.8.6.bb
similarity index 96%
rename from meta/recipes-extended/libarchive/libarchive_3.8.5.bb
rename to meta/recipes-extended/libarchive/libarchive_3.8.6.bb
index fcfaf5d2313..c984eb78401 100644
--- a/meta/recipes-extended/libarchive/libarchive_3.8.5.bb
+++ b/meta/recipes-extended/libarchive/libarchive_3.8.6.bb
@@ -32,7 +32,7 @@  EXTRA_OECONF += "--enable-largefile --without-iconv"
 SRC_URI = "https://libarchive.org/downloads/libarchive-${PV}.tar.gz"
 UPSTREAM_CHECK_URI = "https://www.libarchive.org/"
 
-SRC_URI[sha256sum] = "8a60f3a7bfd59c54ce82ae805a93dba65defd04148c3333b7eaa2102f03b7ffd"
+SRC_URI[sha256sum] = "213269b05aac957c98f6e944774bb438d0bd168a2ec60b9e4f8d92035925821c"
 
 inherit autotools update-alternatives pkgconfig

[whinlatter,v2,09/51] libarchive: upgrade 3.8.5 -> 3.8.6

Commit Message

Patch