ports/core (3.5): [notify] libarchive: update to 3.3.3

crux at crux.nu crux at crux.nu
Tue Oct 23 15:54:28 UTC 2018


commit 1522e5dd854b2dec09c830b727fc76426a78a379
Author: Juergen Daubert <jue at jue.li>
Date:   Tue Sep 4 18:42:44 2018 +0200

    [notify] libarchive: update to 3.3.3
    
    includes security fixes, see
    https://www.cvedetails.com/vulnerability-list/vendor_id-12872/product_id-26168/version_id-223069/Libarchive-Libarchive-3.3.2.html
    
    Note
    ----
    to use the new version of libarchive rebuild core/pkgutils
      prt-get update -fr pkgutils

diff --git a/libarchive/.footprint b/libarchive/.footprint
index 5ac6902f..1c88dfb8 100644
--- a/libarchive/.footprint
+++ b/libarchive/.footprint
@@ -9,9 +9,9 @@ drwxr-xr-x	root/root	usr/include/
 drwxr-xr-x	root/root	usr/lib/
 -rw-r--r--	root/root	usr/lib/libarchive.a
 -rwxr-xr-x	root/root	usr/lib/libarchive.la
-lrwxrwxrwx	root/root	usr/lib/libarchive.so -> libarchive.so.13.3.2
-lrwxrwxrwx	root/root	usr/lib/libarchive.so.13 -> libarchive.so.13.3.2
--rwxr-xr-x	root/root	usr/lib/libarchive.so.13.3.2
+lrwxrwxrwx	root/root	usr/lib/libarchive.so -> libarchive.so.13.3.3
+lrwxrwxrwx	root/root	usr/lib/libarchive.so.13 -> libarchive.so.13.3.3
+-rwxr-xr-x	root/root	usr/lib/libarchive.so.13.3.3
 drwxr-xr-x	root/root	usr/lib/pkgconfig/
 -rw-r--r--	root/root	usr/lib/pkgconfig/libarchive.pc
 drwxr-xr-x	root/root	usr/share/
diff --git a/libarchive/.signature b/libarchive/.signature
index 3a9ccc04..92055c4d 100644
--- a/libarchive/.signature
+++ b/libarchive/.signature
@@ -1,5 +1,5 @@
 untrusted comment: verify with /etc/ports/core.pub
-RWRJc1FUaeVeqovVfgRmnm4RBvHMLjxeq9j/f80JLfYsnn7sd32gQvA3qT5SG1lP8cNMcZ4TXZhRbeH/Tp221I0uueE1saS7SwI=
-SHA256 (Pkgfile) = 285ee8e055799be0f54bce7086ce240a9d7e593a4476fe5ad9472c33f49758ef
-SHA256 (.footprint) = f9b52dc3e6b29e0744100f97f19a3dbcc25ad1e861c9e702878a3b537d59a548
-SHA256 (libarchive-3.3.2.tar.gz) = ed2dbd6954792b2c054ccf8ec4b330a54b85904a80cef477a1c74643ddafa0ce
+RWRJc1FUaeVeqohkDc5wkhri/9q/no5CA/dFeILdmk1UawvgjKmk1lA0eW+Uwis7PTu6zppLewE6NLQRJDJluOY+ctOMnmqGHQw=
+SHA256 (Pkgfile) = 0d9c7a28bdcab59e3042c5de235940b67e9dd0943dfaa8b4085089f7cec7fa2c
+SHA256 (.footprint) = cc20e7d228c38d1c2570b8fc9df5663e0ffe737865ff06368720ccbfa7afc9ee
+SHA256 (libarchive-3.3.3.tar.gz) = ba7eb1781c9fbbae178c4c6bad1c6eb08edab9a1496c64833d1715d022b30e2e
diff --git a/libarchive/Pkgfile b/libarchive/Pkgfile
index 86f787c8..c71d5dd8 100644
--- a/libarchive/Pkgfile
+++ b/libarchive/Pkgfile
@@ -4,14 +4,14 @@
 # Depends on:  bzip2 xz zlib acl lzo
 
 name=libarchive
-version=3.3.2
+version=3.3.3
 release=1
 source=(http://www.libarchive.org/downloads/$name-$version.tar.gz)
 
 build() {
 	cd $name-$version
 
-	# We're passing --without-xml2, --without-expatto and --without-nettle
+	# We're passing --without-xml2, --without-expat and --without-nettle
 	# to avoid linking to libraries which are only available in opt. 
 	# XML support is only needed for the xar format which we can live without.
 	
@@ -19,7 +19,8 @@ build() {
 	            --without-xml2 \
 	            --without-expat \
 	            --without-nettle \
-	            --without-openssl
+	            --without-openssl \
+                --without-zstd
 
 	make
 	make DESTDIR=$PKG install


More information about the CRUX mailing list