Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libarchive for openSUSE:Factory checked in at 2025-12-04 11:20:50 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libarchive (Old) and /work/SRC/openSUSE:Factory/.libarchive.new.1939 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libarchive" Thu Dec 4 11:20:50 2025 rev:60 rq:1320727 version:3.8.3 Changes: -------- --- /work/SRC/openSUSE:Factory/libarchive/libarchive.changes 2025-06-12 15:47:30.898869770 +0200 +++ /work/SRC/openSUSE:Factory/.libarchive.new.1939/libarchive.changes 2025-12-04 11:26:26.574420854 +0100 @@ -1,0 +2,39 @@ +Sat Nov 29 09:02:11 UTC 2025 - Andreas Stieger <[email protected]> + +- Update to 3.8.3: + * lib: Create temporary files in the target directory + (boo#1254340) + * lha: Fix for an out-of-bounds buffer overrun when using + p[H_LEVEL_OFFSET] (boo#1254341) + * 7-zip: Fix a buffer overrun when reading truncated 7zip headers + (boo#1254342) + * lz4 and zstd: Support both lz4 and zstd data with leading + skippable frames +- update upstream signing key + +------------------------------------------------------------------- +Fri Oct 31 19:56:50 UTC 2025 - Adrian Schröter <[email protected]> + +- update to 3.8.2: + Security fixes: + * 7zip: Fix out of boundary access + * tar reader: fix checking the result of the strftime (CVE-2025-25724) + + Notable bugfixes: + * bsdtar: Allow filename to have CRLF endings + * lib: archive_read_data: handle sparse holes at end of file correctly + * lib: improve filter process handling + * lib: fix error checking in writing files + * lib: handle possible errors from system calls + * lib: avoid leaking file descriptors into subprocesses + * lib: parse_date: handle dates in 2038 and beyond if time_t is big enough + * RAR5 reader: fix multiple issues in extra field parsing function + * RAR5 reader: early fail when file declares data for a dir entry + * tar writer: fix replacing a regular file with a dir for ARCHIVE_EXTRACT_SAFE_WRITES + * tar reader (Windows): check WCS pathname in header_gnutar before overwriting + * tar reader: fix an infinite loop when parsing V headers + * zip writer: fix a memory leak if write callback error early + * zip writer: fix writing with ZSTD compression + * zstd write filter: enable Zstandard's checksum feature + +------------------------------------------------------------------- Old: ---- libarchive-3.8.1.tar.xz libarchive-3.8.1.tar.xz.asc New: ---- libarchive-3.8.3.tar.xz libarchive-3.8.3.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libarchive.spec ++++++ --- /var/tmp/diff_new_pack.1TR7Rk/_old 2025-12-04 11:26:27.574463171 +0100 +++ /var/tmp/diff_new_pack.1TR7Rk/_new 2025-12-04 11:26:27.574463171 +0100 @@ -1,7 +1,7 @@ # # spec file for package libarchive # -# Copyright (c) 2025 SUSE LLC +# Copyright (c) 2025 SUSE LLC and contributors # Copyright (c) 2025 Andreas Stieger <[email protected]> # # All modifications and additions to the file contributed by third parties @@ -20,7 +20,7 @@ %define somajor 13 %define libname libarchive%{somajor} Name: libarchive -Version: 3.8.1 +Version: 3.8.3 Release: 0 Summary: Utility and C library to create and read several streaming archive formats License: BSD-2-Clause ++++++ libarchive-3.8.1.tar.xz -> libarchive-3.8.3.tar.xz ++++++ ++++ 33112 lines of diff (skipped) ++++++ libarchive.keyring ++++++ --- /var/tmp/diff_new_pack.1TR7Rk/_old 2025-12-04 11:26:29.450542558 +0100 +++ /var/tmp/diff_new_pack.1TR7Rk/_new 2025-12-04 11:26:29.462543066 +0100 @@ -1,53 +1,83 @@ -----BEGIN PGP PUBLIC KEY BLOCK----- +Comment: 659C 84C0 E23E A1FA 97E0 B58C C040 B508 D63D 2B36 +Comment: Martin Matuska <[email protected]> +Comment: Martin Matuska <[email protected]> +Comment: Martin Matuska <[email protected]> -mQGNBGOTSakBDADYnE8uP/uR+viUTGNdMG8tWtoopvEEACFOwqx6NPb9sXvip5z2 -0ochmO+jNqbV+OiS/6gjpd2f2fmJ241ooqbqZrWklabohbr2ros25bmi1C/77FEK -sGulay334p1LXPxQA3kjEQSINMresnt8FYCO5q50VHgmnhSNaom8jPAy9S06fWqP -yXAXoJ53hwzYN6Bgb2CnU5FTwC9O4v5sI4wjQYq5JC9cbl1hM5PzC5bIse79l5Nq -YTsSuSY2RhOQ7w6L6V295l7C6TPkPBcqkg4Q+AYzdTTZagMN9NcchembtR/aMbuE -xg1PiUMdPOu99uW605XikwwYTy0ZGlz7GZE9EcpoBaoSX5m3haM5k59e5839YtnC -VbS0XOLCDp8uPMbLElGsLH6J1f1RxxV+h4r6ZypDSC0vTi54qI1nxsdJm1n21iwQ -0zP77oLUaIc+Nb0Mmh61+YFPLMgeHlfEsnsYzTWJU/tt6rlFFECKSlBGkiIXy1Ie -yKx2D+OlCZJ7FQMAEQEAAbQjTWFydGluIE1hdHVza2EgPG1hcnRpbkBtYXR1c2th -Lm9yZz6JAdQEEwEKAD4WIQTbLHzxtMJl+u9W4/xYSKGLjxQYSwUCY5NMJAIbAwUJ -BaOagAULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRBYSKGLjxQYS8wPDACGqLMh -K5QGA3fjAY5GxEmYUOLB/0fwtCCsW9I1oVOkqdjR72c6iEKcPDcRpU1Xavncb/Kk -N3kD/xQAVpNhn5tIfNAhflZIeB/2gsOv79qBKyo9SkM9TpdNd60H/uOEeYFA0fPF -qXvrtdxK9gL3qkZtThvGnW49OlAHd8HvOMHCfCWMvJfwnt19PH/HR3cI3aXQHe3a -Oek3+E4eKlCruOm0CM1OKfv6FuO79URSw2NB+Tskj2NW91jIF8iZXveR/qi1lupn -AMLhXXpSJOmRGepKvfPRYoV7llSgSOdE+lElC6ljpe41T19c2PiVxUJOJmT4mtJo -9ghVUeIkUhXNpAU/5I6QAtPoGQfQVcE23PtFM7gibC3nL7yPT8igi904msOIxoUk -4kTOUCmW1KcGRT8SNnOrMkdEDGBg1QNNx7D/jyQf6umg4si3wu5NoVYr4eGorDxu -J0Jq2wm42JQDnXWnmoQpO/XwaOwV+OIveMHd0jgtqYHsQiry8IpUWb/0is60H01h -cnRpbiBNYXR1c2thIDxtbUBGcmVlQlNELm9yZz6JAdQEEwEKAD4WIQTbLHzxtMJl -+u9W4/xYSKGLjxQYSwUCY5NJqQIbAwUJBaOagAULCQgHAgYVCgkICwIEFgIDAQIe -AQIXgAAKCRBYSKGLjxQYS2z5DADN7TMpp246axc2NYYTzmHM1iN39EERH/gXT7dl -+d9uY9i1dPZrtzuLoh/yQX8z3P/WeR2czSRWhkxqZ4R64oYiOq2VA1aJ9QopFKIi -DA1mzTjDvuFiuhVR0484gxXf4N6peVhEoGZvUhLaR1n4L5ykAGwKLyqwOQqwK/BX -jxDSgM45bCWhImE6yux6yNrOYTGZA0IsRShRoDbmXvPZPBxMvQEa8RnzI9QqxbZR -17bNCt4VRYXUUpD1vAccJcLl1UGK12OSIevuUdv17Y05Da4IOhGHz9dXsojeFX4u -S7h1JsGZFV4O7XyVpnF5qwqYukN/ScYg2QJIkm/Is3m2AVx58xh2twoFfBew6qID -tnuWtzKlIqOlFST5nhSCaIAoGiVDEisXMY1ZffUJsugaKK6cufCw16dU9C3Kez4T -ap5j1vkIdPylL7i631g7UnNvpi/5ZaxAB3yB00G0LKqTRGjqRAaXnCDuXA89brLF -/wLqwsOROw6B1iQ/OyDhTPS0z6i5AY0EY5NJqQEMALs/XcCV+Xe34TA/eOWyQ4Qe -qbNMdjNBxXW3gpapCG5pMKtlrN/elyYTPJHeas63VWWYyWEhpfb54gISyZOrkwU2 -S6kRtNSw4dADLDbMjfclB+EMKkF3rovhlBz5483PC5Dbw4KVIvZPgdWbAzUERBey -XOlN2n5EQjcKcpuAlXlgR4ZtN9n1Po5SgCyjJbufIBxAho+Em1QoX+hne4eGfKf8 -o8feHbKibBqINj58GpCzyoyDDQ4NV+gRxU3AR85p2jNJrSrFELh7ZnHLTQvE1D9b -/DRhRHDshTRTiAVHGrlCvhIQL1NnsOqqZUz4zv03CsPzMNfvgxlw8rvt1SIAZecC -L9xz6P5zVb0svVq89Sc7S5AY7xQ7YhMf+fuG2ihpJFMAEBACypcqnLj0pdG1cZiv -dx7Pw4Gd/sag5uUiRj+myPzOo5LpfbU8acmGEoemdZOsO1XO1ABJFOhXHY6cyLgD -xk7sQvnlO2tTu1qvwPzKSr0XX6MfqUgtHwkELSnEVQARAQABiQG8BBgBCgAmFiEE -2yx88bTCZfrvVuP8WEihi48UGEsFAmOTSakCGwwFCQWjmoAACgkQWEihi48UGEtO -Hwv+Lht02gAsLxdqoMs5gBhC/jY2KMJhx/jrhCeIvdZWAZiBJ9wslqJkbhwF6tNt -/x1BY8pam4j5enLkLCWyyp3wm0QWiJME0N3+tN5QMFpO5kMbFygCCIXSOd+kfrA1 -xFfQt840LTV1rzvp+YW8SYBFjWtanW4K49C7cewacZbY+zwsWZ/FV1bbEZGnB7lL -0hiwOiXfjmxg0fVlEjLy7bt/8pxJ6w4wQsm78a4l3D2Oo1ux97Kcb+ymJvABmG7X -Lc90uLbJFBiSbxxbVcbvHx55kGtEzttN+YzJuOTDgXHoFXL4wMTsyVlkzCw1m/qW -uW68PO7RtXWl4C1aa6K/xC2jgiFT8IwppkEINeb2lIy96iyOPKD+NzocHBCcbx4W -f9yXue8x8Bptr5Pzv1G422yRLv4N9Hdb3fSALs1FCjVJFuov3FPjpKz6YhyY0vLj -PNcYqehQphtFs0ra8+OkupcNBiAYsPUlMGhFQakPxpEl4/IM5dny0YrtTuYJAdrI -HXDL -=weXn +xsFNBGkbo5wBEADvETPxMJo6FfGWVwILYdkly6HppKUIETRrFEVY3jahDs9Lnit8 +3QfTuXoCYfgvZXaoppcoZZF3YJ7BSFAERKI0idl+/gZDCatMkiE5gHLqQv0BdFcA +mbEF9tN6gsHASekSKNOVSPWuVUvhH2PhXtc8Hp/ysB6nVJ+Sw0ePB+bMkkU5fwIJ +QWEAuFsl+PS1ip4IS0UdPLAhDkdOqruMJaxJoIr7c1+Tq8vrqZ7DQ3DBnCbflb6G +7OjoTsqioNQ/78p0mMTm9pswh9l3Ak0tHOWmEOfCkKuGm5+xNWTy7hRiB9eEai5r +BvkRlZ4cG1Tbu2Kycf//akAaO1fTLlVellnrgiuTopucxYYL77NFuRIddfRRQK3v +k3yQdZwyuwa9yTzJuZ/jkfoHsTFpnNY1GLl/ruyOFpzhKSoaAecRyU18w7qE8gO7 +RBtOMWMhmqspX6qFznAGyNd8CAm/8pn0nntkHV7cyNC1GRm8vhxcGZdE7NX4xM3w +d4f4m8PKBvSlrlOkZ8XKIZWNl2I/JKJyjxC0Hozdi8hXu5Jf4lzN0rO3w4XWum9f +ZBxI8GEOHKyWZwpAkUcimBV2PSkp8JZGSwX7mJgsS5ivV4wPBkp0XvhoEIzDE52H +wsfLo9Xfj1lPIxOLYtqpTsetKzq6BbmJm8l7e9WlcY6GO4b+mjs9JVq4WQARAQAB +zSJNYXJ0aW4gTWF0dXNrYSA8bWFydGluQG1hdHVza2EuZGU+wsGUBBMBCgA+FiEE +ZZyEwOI+ofqX4LWMwEC1CNY9KzYFAmkbo5wCGwMFCQeFfBQFCwkIBwIGFQoJCAsC +BBYCAwECHgECF4AACgkQwEC1CNY9KzbL7xAAt6ik1v61ZN59i4pb23ObmtBUpIaJ +UZ2VFhNgSxaTqKikBsQxnlBVQ6rKE97d7ZbTO4ajwFvV1MGBe6Yg9GuG3GLWNloY +hs+bMPZB4+kLFK88dHornRi7Ey4qGjojfEZ3J4p0DAS38y6HW+/YDo+aZTs/O0vb +19AQssccz/FWrEGxw+LJGZ7wMU5bq8UbQiItVjoLfQHCfXFXnMCVbpc/fi1+KIt8 +MmGW7sQuu1bPpoSVGW3XNlUXUPK8U2aNXrNGmqTlSIPUzWufSCFtIu5QEwAN/lrk +7QHvEr/kbiB86DPXvrN6vGw2ORWkNEhUgnilHNdFX7u3M/KpSB3f0CpIuBF4rTXN +xM08+mFm3kp6r2jZ3Lirnsl/oZTIB+npcF9OSrwW+qJ3LrnimVwMM4YIFKq3W24b +icCoCfnWHI5zGIjEoCNhnkV4cFQfOsrzwnD39XROEddTj5PFKJSMf7FmMUa3X2yA +nvQdhfexJi6l2/+8wv2G+Ie/OcdtkeedXjXXvnbOUtap8c+TvLt+r6vP4i9XwDXb +CEL4TMVendZX4BDMusAU+j67vGtfmCDPpnuurj3uvTzx9I9rOZ+8+Cq4HP6tT+Is +tBftcyKf6MKtY1naiKGFWnhVCxo5LczxYQC3SMFfCeG3ljl95a5yGBSyCRBsNxil +3WdlDiY3KSTV9qPNI01hcnRpbiBNYXR1c2thIDxtYXJ0aW5AbWF0dXNrYS5vcmc+ +wsGUBBMBCgA+FiEEZZyEwOI+ofqX4LWMwEC1CNY9KzYFAmkbo7MCGwMFCQeFfBQF +CwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQwEC1CNY9KzZ41g/9EwXeMXXe5Mg6 +FFRKSfJZbeD+4VuRLUNHgS/L8YmgdI7aP81536pQy7htlL3Z1IQgZJJ5SBsDGPYX +zd4cTScESiB6yg+eX63BuCJxQsTWluVeh5k9xhb+m4fHiY6vRaf3M3n9SXrryYlZ +Sl4JEMO51IWcjVhCwbxjnXN0GORA0h74feAwRUhAHIONGjygnBDDAShIlHrXyEa2 +D4Zp32ko+KzCwairPcoQX/iu+gzIDde2wl5iChBbiaiSO7tU1TNVJB7k1pWl+656 +dboUlBH9qm2eBshexDc7Tl3YhNvxekwd/XFyOGj9hsua3w5m1VMrEDEWzp6i+M0V +nWS0aGXx2j6GsQF8SxZJ9oXwatwWv95n7DYV+Prx4Q9RrMup4FZJ0qu6YnYGsbRI +w8i7YFQm9q9N0dzWn9rxu3MGVTK0wgwTTPxDT29NwLNdAnnBYOx+TlqiujRC2S/c +WOSrRHpFDsefc4HvHR5X9kOJn6AvUgZLYClm9aT6rTvY5WYBXDZTg90oyoWdqiG6 +zT7C5EAjLDy2H3ehNsyymYfr3MKNlBN/1JHZqnzZ0C04pexef9LQngoLIe4emltF +uLlJ+3N0Az3qjDbxSMvXxUSha1G+ZU9xRwRNH5r1VS7+m7IewVRSosM1uLvzeYdr +RzNFONhUSypFmYJrFLPiDbbGc3F8si7NH01hcnRpbiBNYXR1c2thIDxtbUBGcmVl +QlNELm9yZz7CwZQEEwEKAD4WIQRlnITA4j6h+pfgtYzAQLUI1j0rNgUCaRujugIb +AwUJB4V8FAULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRDAQLUI1j0rNgvdD/9f +q1hZzn+D63GzvAuSW2TDl/2tjx/Nw9xyFcTZDoJINvTP8+2Bu5lxCAfnpWl47pkR +FT3YF50VjujX++TwuWJvuVVI8yTZJUQOECZ0JJlfQtanT7CWQ5qUwgRhfHZOX7R9 +yffTsb9IcWwBg1GWmsurZHB9ZipmuLAp4e0WF8ZrJDjuu4fYRp6N8CUxaF/DuI4m +zUxmmYVFmwO2mL89hXw1rBCmYexkMrKwcs+iu7+HJQlBPJS2SDidXNrpwQoQ/XOf +O8v+gReaQgUWhb3PKc5o8yCO7mGF2Mu96CPbSJS2HaSdw61hYCnn4vCsi8VyUrkV +ozGLMU5YJfVTe1xqbBKqg7Cnx8HeyGBvk4DFDaP6ZtJ7Zk+yKdyPofDzrLqtqjZF +XwXEN+gdEz1AZPIeanu4kJZePuoZpj0jP5kiGyux2SRx2UKItcI8eMDyPCveSzpp +oTE3LYn4xzbQ+pX/uZgC3IY2LgDc5SSAhHNSq/yGl02OohWCjGIW14m3V8hv5Eqh +VEy27v6hKBbQzhC2hrIl4Htt4wGL8y/LBTbHBBYvKkqWcLYTfpTAChDk8Nhp/YiT +K8vrZfBX4ZaRxqwoKCl/wUYpUSUzz+nbOPEHjHacbMPEhrhTsvSOZU0sD4QoYJd2 +OThcLP3pB57NMEd+jmFKcGns0WhydUq/3lmDvb5oVc7BTQRpG6OcARAAr3XLdz5q +uxoLsEwDoKJaSp2FvaQZ+yRyayKyTaj0NFsTRKgv8V+tQNdNRhMUsS4XMFzMQ6rY +fiJmvHT6XDFKRhOgyT3oI8kVJG987xrdzw27ECTdjwG9T/p2CotuyEByMMJds2Ji +p33dKWNXcQMnoHH0EZ/29ZsXLRXAHp2z5lq7Jv/0BpUSYH8+eekPqkrFBRNJrn2S +plSYM/FtCbAKnvToZmcgNUmgaaFPy1jRLyss2hVnGA6OSZOvJVChtEQsKdvuprEY +iYUPEjpnKFt2m4oyhsQvI9BxW6ny6pYkwVzGa/oxN3DB2PJ6mCnMFEyzBR5QXCDR +QVR5jyAiLQEBE9Ol53cC6CZG9BroRetPX8njPztdXsIzEJLaAqvJ5fQpd/DE5mME +0JTUhAGW2cAKEnVJryUyfJ3ft753cw8ZXoSwFTFN/GDebfqUztwKPjzILYaa1Ryx +va2mCVu0S0a91ib7Lpa1RTVw15sDBfLnGum2ChJ8qobBOfAJTdmBWZxeSBdwQ6gb +unJ33K2BPH+FR4xZcQXoz9wC6bgJnNudljlbeyw8pyOkQWeja9bXdddXLfuQLAOj +xTcxs6QtpuCZuKitoVu9x1B+dAeBj37rhcV1sVwYPGaUCM+527c+h0smy0Pz+ITL +049x68e1nm6D9hFjvMscuodwgzZj/UZoMbsAEQEAAcLBfAQYAQoAJhYhBGWchMDi +PqH6l+C1jMBAtQjWPSs2BQJpG6OcAhsMBQkHhXwUAAoJEMBAtQjWPSs2/SkP/0R2 +JHgE7Yz6rgmfOWL7SBW5xCjvVwglXoyyRliiRd84cvqOSGZeY4333O9uanYLo+uW +J0jz8I2wMieXcdBHq6N/evzO1ps55jsbHIb8AcfYMdW3DeP7C9QAvMUOIANY5Wm3 +ZmvWMNeGtW16gTg9F680EyRzxCWbK2uno/OrgO5RljrSX7P3lPLuPFzcDYI9wNUX +UOhkAcuyRa2QBA8P4lag1QhbVxKFN4nWpw47V4ad0dgMp6LdFEB48Yio9tyNe464 +XFU6KkoenII4E23hAueSb2Y8Wti8T5Q/vVNJpU5DnHTaPJA/0V9ahUeOyMzvv9Wt +QHh72P0uGtYQLZRqKrecEdtaREPM63AfYdlQEvr6xiODSUgJzk1ApofFBJoJocCg +sBssj4BmZX7/YBG+VNZ/WOSJwUVm2YdBrTEBQDgUrQBG5JHsUUC/y2h/CXKsqjxK +wM2KI6245FGHLmDqjuhDha93+XPIWxZdsXymqZtabCTL2Ck7F7VEfvZeLQdABEJc +SMLX7CirwB4nxDJnCpXT9EVx/2Dr7Nxuj3A40QmDmzGwjTMeQYk9HBd+3AqcDrT0 +XcGScS8NcIzfu7VMzOseRlGuvqFdb8icIanTzq/x2ERuK120IMrXDIbFkWnnHz+e ++v00rWkJq+IWj/uDcWwC5MDOyYENoGaeD2GAnO40 +=Bisa -----END PGP PUBLIC KEY BLOCK-----
