From 29f253f0fa6ef36b14ab09ab825b9784de06c225 Mon Sep 17 00:00:00 2001 From: "A. Wilcox" Date: Fri, 31 Mar 2023 01:56:55 -0500 Subject: system/libarchive: Update to 3.6.2 [CVE] --- system/libarchive/APKBUILD | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) (limited to 'system/libarchive/APKBUILD') diff --git a/system/libarchive/APKBUILD b/system/libarchive/APKBUILD index e76303dd5..5c37f8a8d 100644 --- a/system/libarchive/APKBUILD +++ b/system/libarchive/APKBUILD @@ -1,10 +1,10 @@ # Contributor: Sergey Lukin # Maintainer: A. Wilcox pkgname=libarchive -pkgver=3.6.1 -pkgrel=1 +pkgver=3.6.2 +pkgrel=0 pkgdesc="Multi-format archive and compression library" -url="https://libarchive.org/" +url="https://www.libarchive.org/" arch="all" license="BSD-2-Clause AND BSD-3-Clause AND Public-Domain" depends="" @@ -17,6 +17,8 @@ source="https://github.com/libarchive/libarchive/releases/download/v$pkgver/$pkg " # secfixes: +# 3.6.2-r0: +# - CVE-2022-36227 # 3.6.1-r0: # - CVE-2022-26280 # 3.4.2-r0: @@ -58,6 +60,6 @@ tools() { ln -s bsdcpio "$subpkgdir"/usr/bin/cpio } -sha512sums="58f7ac0c52116f73326a07dec10ff232be33b318862078785dc39f1fb2f8773b5194eabfa14764bb51ce6a5a1aa8820526e7f4c76087a6f4fcbe7789a22275b4 libarchive-3.6.1.tar.gz +sha512sums="24e476465054a29a2d48adf3c197a171b5361fa5038729a1f14d578c6701424de4e5dd6a2b20a6b697969ab43bdd8afc1585f8de0465c266f455d7eaa19e5048 libarchive-3.6.2.tar.gz 27cf2aaa3e70e3a2a9944fac0c96c411e669c7e1a48daad1423bff68eef0f49153e5ef9d22dc9591a65353119d7fe203a28258ab82278aeb86b46fe691bcfb6a disable-locale-tests.patch 56a2b13b6cd7b127c04ac50ebf49994ec91ff2467d5d0f32b8428bd4df82b167459d4630dee5d1b5119f70b04ea6fe4411d44b768e0f313fa302c9e5fe51b7cd disable-unaligned-access-arm32-xxhash.patch" -- cgit v1.2.3-60-g2f50