kumquat-buildroot/package/libarchive/libarchive.hash

# From https://www.libarchive.de/downloads/sha256sums
sha256  b60d58d12632ecf1e8fad7316dc82c6b9738a35625746b47ecdcaf4aed176176  libarchive-3.4.2.tar.gz
# Locally computed:
sha256  e1e3d4ba9d0b0ccba333b5f5539f7c6c9a3ef3d57a96cd165d2c45eaa1cd026d  COPYING
package/libarchive: security bump to version 3.4.1 Fixes the following security vulnerabilities: - CVE-2019-19221: In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive. And adds various security fixes. For details, see : https://github.com/libarchive/libarchive/releases/tag/v3.4.1 Also remove upstreamed patch. Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2020-01-06 20:56:37 +01:00			`# From https://www.libarchive.de/downloads/sha256sums`
package/libarchive: security bump to version 3.4.2 - Fix CVE-2020-9308: archive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with an invalid or corrupted header (such as a header size of zero), leading to a SIGSEGV or possibly unspecified other impact. - use --with-nettle to enable nettle support, see https://github.com/libarchive/libarchive/commit/f96a71144b7725ca4a94d84bd27d7dca8c2f58d2 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> [yann.morin.1998@free.fr: - drop new optional dependency to mbedtsl, forced off for now ] Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2020-02-28 23:12:34 +01:00			`sha256 b60d58d12632ecf1e8fad7316dc82c6b9738a35625746b47ecdcaf4aed176176 libarchive-3.4.2.tar.gz`
libarchive: add hash and enable lzma support Add libarchive hash. Enable lzma support. Both xz and lzma support are provided by the xz library. [Thomas: explicitly pass --with-lzma when xz is available.] Signed-off-by: Nimai Mahajan <nimaim@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2015-06-26 17:01:58 +02:00			`# Locally computed:`
package/libarchive: bump to version 3.4.0 Use a mirror download site. https://github.com/libarchive/libarchive/issues/1216 Drop upstream patches. Mention additional licenses for new RARv5 code. Update license file hash. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2019-07-05 06:32:13 +02:00			`sha256 e1e3d4ba9d0b0ccba333b5f5539f7c6c9a3ef3d57a96cd165d2c45eaa1cd026d COPYING`