kumquat-buildroot/package/libarchive/libarchive.hash

# From https://www.libarchive.de/downloads/sha256sums
sha256  f0b19ff39c3c9a5898a219497ababbadab99d8178acc980155c7e1271089b5a0  libarchive-3.5.2.tar.xz
# Locally computed:
sha256  b2cdf763345de2de34cebf54394df3c61a105c3b71288603c251f2fa638200ba  COPYING
package/libarchive: security bump to version 3.4.1 Fixes the following security vulnerabilities: - CVE-2019-19221: In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive. And adds various security fixes. For details, see : https://github.com/libarchive/libarchive/releases/tag/v3.4.1 Also remove upstreamed patch. Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2020-01-06 20:56:37 +01:00			`# From https://www.libarchive.de/downloads/sha256sums`
package/libarchive: security bump to version 3.5.2 Fix CVE-2021-36976: libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block). https://github.com/libarchive/libarchive/releases/tag/v3.5.2 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> 2021-08-24 21:50:06 +02:00			`sha256 f0b19ff39c3c9a5898a219497ababbadab99d8178acc980155c7e1271089b5a0 libarchive-3.5.2.tar.xz`
libarchive: add hash and enable lzma support Add libarchive hash. Enable lzma support. Both xz and lzma support are provided by the xz library. [Thomas: explicitly pass --with-lzma when xz is available.] Signed-off-by: Nimai Mahajan <nimaim@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2015-06-26 17:01:58 +02:00			`# Locally computed:`
package/libarchive: bump to version 3.5.1 Libarchive 3.5.1 is a bugfix release. Update COPYRIGHT hash due to clarification about 'archive_entry.c' source file: - https://github.com/libarchive/libarchive/commit/fde4660d7bda7debe8e6c8166d49fe9fa62db61d Signed-off-by: Pierre-Jean Texier <texier.pj2@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2021-01-04 19:47:19 +01:00			`sha256 b2cdf763345de2de34cebf54394df3c61a105c3b71288603c251f2fa638200ba COPYING`