packages/libs/libarchive, branch master

libarchive: pass CMAKE_INSTALL_LIBDIR

2025-06-10T19:41:35Z

libarchive changed the pkgconfig install logic in 3.8.1, so that it now installs the pkgconfig file in ${CMAKE_INSTALL_LIBDIR}/pkgconfig instead of the previous lib/pkgconfig. While this is a bug[1] in libarchive as this was unintended change, until that is fixed upstream lets pass -DCMAKE_INSTALL_LIBDIR=lib to restore previous behaviour in order for InstallDev step to install the .pc file so other packages can find libarchive and link against it. [1] https://github.com/libarchive/libarchive/issues/2667 Fixes: d77931df5db6 ("libarchive: bump to 3.8.1") Signed-off-by: Robert Marko

libarchive: bump to 3.8.1

2025-06-07T09:57:04Z

This is a feaure and bugfix release. New features: bsdtar: support --mtime and --clamp-mtime (#2601) lib: mbedtls 3.x compatibility (#2602) 7-zip reader: improve self-extracting archive detection (#2088) xar: xmllite support for the XAR reader and writer (#2388) zip writer: added XZ, LZMA, ZSTD and BZIP2 support (#2137, #2284, #2391) zip writer: added LZMA + RISCV BCJ filter (#2403) Notable security fixes: rar: do not skip past EOF while reading (#2584) rar: fix double free with over 4 billion nodes (#2598) rar: fix heap-buffer-overflow (#2599) warc: prevent signed integer overflow (#2568) tar: fix overflow in build_ustar_entry (#2588) Notable bugfixes: ibarchive: fix FILE_skip regression (#2642) compress: Prevent call stack overflow (#2649) iso9660: always check archive_string_ensure return value (#2651) tar: Support negative time values with pax (#2634) tar: Reset accumulated header state after reading macOS metadata blob (#2636) tar: Keep block alignment after pax error (#2637) tar: Handle extra bytes after sparse entries (#2643) windows: check archive_wstring_ensure return value (#2652) bsdtar: don't hardlink negative inode files together (#2587) gz: allow setting the original filename for gzip compressed files (#2544) lib: improve lseek handling (#2564) lib: support @-prefixed Unix epoch timestamps as date strings (#2606) rar: support large headers on 32 bit systems (#2596) tar reader: Improve LFS support on 32 bit systems (#2582) Full changelog: https://github.com/libarchive/libarchive/compare/v3.7.9...v3.8.1 Build system: x86/64 Build-tested: x86/64 Run-tested: x86/64 Signed-off-by: John Audia

libarchive: bump to 3.7.9 fixing CVE-2025-25724, CVE-2025-1632, CVE-2024-57970

2025-04-14T08:41:40Z

Libarchive 3.7.9 is a bugfix release, fixing a regression in libarchive 3.7.8 regarding GNU sparse entries was fixed. Libarchive 3.7.8 is a bugfix and security release: Security fixes: * tar reader: Handle truncation in the middle of a GNU long linkname (CVE-2024-57970) * unzip: fix null pointer dereference (CVE-2025-1632) * tar reader: fix unchecked return value in list_item_verbose() (CVE-2025-25724) Important bugfixes: * 7zip reader: add SPARC and POWERPC filter support for non-LZMA compressors * tar reader: Ignore ustar size when pax size is present * tar writer: Fix bug when -s/a/b/ used more than once with b flag * cpio: Fix a Y2038 bug on Windows * libarchive: Handle ARCHIVE_FILTER_LZOP in archive_read_append_filter * libarchive: Adding missing seeker function to archive_read_open_FILE() Full Changelog: https://github.com/libarchive/libarchive/compare/v3.7.7...v3.7.8 Signed-off-by: Petr Štetiar

libarchive: bump to 3.7.7 fixing a lot of security issues

2025-04-13T08:43:29Z

libarchive fixed a lot of security issues in the last few releases, listing only notable changes, libarchive 3.7.5: * rar4: protect copy_from_lzss_window_to_unp() CVE-2024-20696 * rar4: fix CVE-2024-26256 libarchive 3.7.6: * this release fixes a tar regression introduced in libarchive 3.7.5 libarchive 3.7.7: * gzip: prevent a hang when processing a malformed gzip inside a gzip (OSS-Fuzz) * tar: don't crash on truncated tar archives (OSS-Fuzz) * tar: fix two leaks in tar header parsing Link: https://github.com/libarchive/libarchive/releases Signed-off-by: Matthias Franck

libarchive: disable linking with pcre2

2024-09-17T12:18:11Z

Looks like libarchive v3.7.3 adds support for pcre2 (https://github.com/libarchive/libarchive/commit/d1231a7ea7df4db6ddba73f06df67dbab0174a5c). Because of this, the following build error is observed (in the case pcre2 is compiled before libarchive): Package libarchive is missing dependencies for the following libraries: libpcre2-8.so.0 libpcre2-posix.so.3 So let's disable linking with pcre2, just like linking with pcre was disabled before. Signed-off-by: Matthias FRANCK

libarchive: update to 3.7.4

2024-06-02T00:28:51Z

Signed-off-by: krant

libarchive: update to 3.7.3

2024-04-10T23:13:35Z

Signed-off-by: krant

libarchive: update to 3.7.2

2024-02-07T21:52:21Z

- Don't set CMake options matching the defaults Signed-off-by: krant

libarchive: add missing CONFLICT

2022-12-23T18:25:32Z

Signed-off-by: Michal Vasilek

libarchive: update to 3.6.2

2022-12-23T18:25:32Z

* fixes CVE-2022-36227 * drop upstreamed patch * removed deprecated AUTORELEASE Signed-off-by: Michal Vasilek