From c7a16c79198696e4a7e9863b61920f5f104d942c Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Sun, 26 May 2024 23:06:48 +0200 Subject: [PATCH] package/libarchive: security bump to version 3.7.4 Fixes the following security issues: - CVE-2024-26256: libarchive Remote Code Execution Vulnerability https://github.com/advisories/GHSA-2jc9-36w4-pmqw For more details, see the release notes: https://github.com/libarchive/libarchive/releases/tag/v3.7.4 Signed-off-by: Peter Korsgaard --- package/libarchive/libarchive.hash | 2 +- package/libarchive/libarchive.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/libarchive/libarchive.hash b/package/libarchive/libarchive.hash index ab6813686e..a2c6488731 100644 --- a/package/libarchive/libarchive.hash +++ b/package/libarchive/libarchive.hash @@ -1,4 +1,4 @@ # From https://www.libarchive.de/downloads/sha256sums -sha256 63e7a7174638fc7d6b79b4c8b0ad954e0f4f45abe7239c1ecb200232aa9a43d2 libarchive-3.7.3.tar.xz +sha256 f887755c434a736a609cbd28d87ddbfbe9d6a3bb5b703c22c02f6af80a802735 libarchive-3.7.4.tar.xz # Locally computed: sha256 b2cdf763345de2de34cebf54394df3c61a105c3b71288603c251f2fa638200ba COPYING diff --git a/package/libarchive/libarchive.mk b/package/libarchive/libarchive.mk index 9c35856ff9..1a50b0472d 100644 --- a/package/libarchive/libarchive.mk +++ b/package/libarchive/libarchive.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBARCHIVE_VERSION = 3.7.3 +LIBARCHIVE_VERSION = 3.7.4 LIBARCHIVE_SOURCE = libarchive-$(LIBARCHIVE_VERSION).tar.xz LIBARCHIVE_SITE = https://www.libarchive.de/downloads LIBARCHIVE_INSTALL_STAGING = YES