Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libarchive for openSUSE:Factory checked in at 2022-04-13 21:03:58 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libarchive (Old) and /work/SRC/openSUSE:Factory/.libarchive.new.1900 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libarchive" Wed Apr 13 21:03:58 2022 rev:46 rq:968364 version:3.6.1 Changes: -------- --- /work/SRC/openSUSE:Factory/libarchive/libarchive.changes 2022-03-05 14:44:27.843716771 +0100 +++ /work/SRC/openSUSE:Factory/.libarchive.new.1900/libarchive.changes 2022-04-13 21:04:00.200519057 +0200 @@ -1,0 +2,12 @@ +Fri Apr 8 17:01:05 UTC 2022 - Dirk M??ller <dmuel...@suse.com> + +- update to 3.6.1: + * 7zip reader: fix PPMD read beyond boundary (#1671) + * ZIP reader: fix possible out of bounds read (OSS-Fuzz 38766 #1672) + * ISO reader: fix possible heap buffer overflow in read_children() (OSS-Fuzz 38764, #1685) + * RARv4 redaer: fix multiple issues in RARv4 filter code (introduced in libarchive 3.6.0) + * fix heap use after free in archive_read_format_rar_read_data() (OSS-Fuzz 44547, 52efa50) + * fix null dereference in read_data_compressed() (OSS-Fuzz 44843, 1271f77) + * fix heap user after free in run_filters() (OSS-Fuzz 46279, #1715) + +------------------------------------------------------------------- Old: ---- libarchive-3.6.0.tar.xz libarchive-3.6.0.tar.xz.asc New: ---- libarchive-3.6.1.tar.xz libarchive-3.6.1.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libarchive.spec ++++++ --- /var/tmp/diff_new_pack.ZFy1wG/_old 2022-04-13 21:04:01.244519892 +0200 +++ /var/tmp/diff_new_pack.ZFy1wG/_new 2022-04-13 21:04:01.248519894 +0200 @@ -30,14 +30,14 @@ %bcond_without ext2fs %endif Name: libarchive -Version: 3.6.0 +Version: 3.6.1 Release: 0 Summary: Utility and C library to create and read several different streaming archive formats License: BSD-2-Clause Group: Productivity/Archiving/Compression URL: https://www.libarchive.org/ -Source0: https://www.libarchive.org/downloads/libarchive-%{version}.tar.xz -Source1: https://www.libarchive.org/downloads/libarchive-%{version}.tar.xz.asc +Source0: https://github.com/libarchive/libarchive/releases/download/v%{version}/libarchive-%{version}.tar.xz +Source1: https://github.com/libarchive/libarchive/releases/download/v%{version}/libarchive-%{version}.tar.xz.asc Source2: libarchive.keyring Source1000: baselibs.conf Patch1: lib-suffix.patch ++++++ libarchive-3.6.0.tar.xz -> libarchive-3.6.1.tar.xz ++++++ /work/SRC/openSUSE:Factory/libarchive/libarchive-3.6.0.tar.xz /work/SRC/openSUSE:Factory/.libarchive.new.1900/libarchive-3.6.1.tar.xz differ: char 25, line 1
