commit 1522e5dd854b2dec09c830b727fc76426a78a379 Author: Juergen Daubert <jue@jue.li> Date: Tue Sep 4 18:42:44 2018 +0200 [notify] libarchive: update to 3.3.3 includes security fixes, see https://www.cvedetails.com/vulnerability-list/vendor_id-12872/product_id-261... Note ---- to use the new version of libarchive rebuild core/pkgutils prt-get update -fr pkgutils diff --git a/libarchive/.footprint b/libarchive/.footprint index 5ac6902f..1c88dfb8 100644 --- a/libarchive/.footprint +++ b/libarchive/.footprint @@ -9,9 +9,9 @@ drwxr-xr-x root/root usr/include/ drwxr-xr-x root/root usr/lib/ -rw-r--r-- root/root usr/lib/libarchive.a -rwxr-xr-x root/root usr/lib/libarchive.la -lrwxrwxrwx root/root usr/lib/libarchive.so -> libarchive.so.13.3.2 -lrwxrwxrwx root/root usr/lib/libarchive.so.13 -> libarchive.so.13.3.2 --rwxr-xr-x root/root usr/lib/libarchive.so.13.3.2 +lrwxrwxrwx root/root usr/lib/libarchive.so -> libarchive.so.13.3.3 +lrwxrwxrwx root/root usr/lib/libarchive.so.13 -> libarchive.so.13.3.3 +-rwxr-xr-x root/root usr/lib/libarchive.so.13.3.3 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/libarchive.pc drwxr-xr-x root/root usr/share/ diff --git a/libarchive/.signature b/libarchive/.signature index 3a9ccc04..92055c4d 100644 --- a/libarchive/.signature +++ b/libarchive/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqovVfgRmnm4RBvHMLjxeq9j/f80JLfYsnn7sd32gQvA3qT5SG1lP8cNMcZ4TXZhRbeH/Tp221I0uueE1saS7SwI= -SHA256 (Pkgfile) = 285ee8e055799be0f54bce7086ce240a9d7e593a4476fe5ad9472c33f49758ef -SHA256 (.footprint) = f9b52dc3e6b29e0744100f97f19a3dbcc25ad1e861c9e702878a3b537d59a548 -SHA256 (libarchive-3.3.2.tar.gz) = ed2dbd6954792b2c054ccf8ec4b330a54b85904a80cef477a1c74643ddafa0ce +RWRJc1FUaeVeqohkDc5wkhri/9q/no5CA/dFeILdmk1UawvgjKmk1lA0eW+Uwis7PTu6zppLewE6NLQRJDJluOY+ctOMnmqGHQw= +SHA256 (Pkgfile) = 0d9c7a28bdcab59e3042c5de235940b67e9dd0943dfaa8b4085089f7cec7fa2c +SHA256 (.footprint) = cc20e7d228c38d1c2570b8fc9df5663e0ffe737865ff06368720ccbfa7afc9ee +SHA256 (libarchive-3.3.3.tar.gz) = ba7eb1781c9fbbae178c4c6bad1c6eb08edab9a1496c64833d1715d022b30e2e diff --git a/libarchive/Pkgfile b/libarchive/Pkgfile index 86f787c8..c71d5dd8 100644 --- a/libarchive/Pkgfile +++ b/libarchive/Pkgfile @@ -4,14 +4,14 @@ # Depends on: bzip2 xz zlib acl lzo name=libarchive -version=3.3.2 +version=3.3.3 release=1 source=(http://www.libarchive.org/downloads/$name-$version.tar.gz) build() { cd $name-$version - # We're passing --without-xml2, --without-expatto and --without-nettle + # We're passing --without-xml2, --without-expat and --without-nettle # to avoid linking to libraries which are only available in opt. # XML support is only needed for the xar format which we can live without. @@ -19,7 +19,8 @@ build() { --without-xml2 \ --without-expat \ --without-nettle \ - --without-openssl + --without-openssl \ + --without-zstd make make DESTDIR=$PKG install