[{"id":3678339,"web_url":"http://patchwork.ozlabs.org/comment/3678339/","msgid":"<9254d97d1fb01a3e21d2a0f5e009d290@free.fr>","list_archive_url":null,"date":"2026-04-16T19:34:03","subject":"Re: [Buildroot] [PATCH 1/1] package/libarchive: security bump\n version to 3.8.7","submitter":{"id":80537,"url":"http://patchwork.ozlabs.org/api/people/80537/","name":"Julien Olivain","email":"ju.o@free.fr"},"content":"On 16/04/2026 09:36, Bernd Kuhls wrote:\n> https://github.com/libarchive/libarchive/releases/tag/v3.8.7\n> \"Libarchive 3.8.7 is a security and bugfix release.\"\n> \n> Signed-off-by: Bernd Kuhls \n\nApplied to master, thanks.","headers":{"Return-Path":"","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@buildroot.org"],"Delivered-To":["patchwork-incoming-buildroot@legolas.ozlabs.org","buildroot@buildroot.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=nfW8O7Yt;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=2605:bc80:3010::137; helo=smtp4.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)"],"Received":["from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fxSr75zxsz1yD3\n\tfor ;\n Fri, 17 Apr 2026 05:34:15 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id 7517340ABB;\n\tThu, 16 Apr 2026 19:34:12 +0000 (UTC)","from smtp4.osuosl.org ([127.0.0.1])\n by localhost (smtp4.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id sriB00AflL4A; Thu, 16 Apr 2026 19:34:10 +0000 (UTC)","from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id 9C29840AB1;\n\tThu, 16 Apr 2026 19:34:10 +0000 (UTC)","from smtp1.osuosl.org (smtp1.osuosl.org [140.211.166.138])\n by lists1.osuosl.org (Postfix) with ESMTP id 427C7259\n for ; Thu, 16 Apr 2026 19:34:09 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by smtp1.osuosl.org (Postfix) with ESMTP id 2801B80FF4\n for ; Thu, 16 Apr 2026 19:34:09 +0000 (UTC)","from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id hdK6iWh13H55 for ;\n Thu, 16 Apr 2026 19:34:08 +0000 (UTC)","from smtp3-g21.free.fr (smtp3-g21.free.fr [212.27.42.3])\n by smtp1.osuosl.org (Postfix) with ESMTPS id 20AE180FF3\n for ; Thu, 16 Apr 2026 19:34:07 +0000 (UTC)","from webmail.free.fr (unknown [172.20.246.2])\n (Authenticated sender: ju.o@free.fr)\n by smtp3-g21.free.fr (Postfix) with ESMTPA id CF97313F89A;\n Thu, 16 Apr 2026 21:34:03 +0200 (CEST)","from 2a01:e0a:1065:2100:52d9:65fe:2df3:c492\n via 2a01:e0a:1065:2100:52d9:65fe:2df3:c492 by webmail.free.fr\n with HTTP (HTTP/1.0 POST); Thu, 16 Apr 2026 21:34:03 +0200"],"X-Virus-Scanned":["amavis at osuosl.org","amavis at osuosl.org"],"X-Comment":"SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver= ","DKIM-Filter":["OpenDKIM Filter v2.11.0 smtp4.osuosl.org 9C29840AB1","OpenDKIM Filter v2.11.0 smtp1.osuosl.org 20AE180FF3"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1776368050;\n\tbh=Hb76q8w8YB5wY/31pOx5GVjT7+1rQyrrm3JnjsJF5Sc=;\n\th=Date:To:Cc:In-Reply-To:References:Subject:List-Id:\n\t List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:\n\t From:Reply-To:From;\n\tb=nfW8O7YtRk2AtYKdBX/cWxd5FgplUMgP/YkAUc832txPL3hcNUXJGjgH3cOPSWyG4\n\t JUbZ3/esZFF3d1nqvg3PydhJHHzEJHzZ7W9+Bf1a7PgliNSN+3fqvjSAF88tHNMXFS\n\t wXppTx88AedsKW2ZNvna06p4mWgcan79BUN5gav3EhVi9bOMDw5XoSb6oLBIM89xuh\n\t 7vJY/dfHKa2JgCr5L459QZ4f1K3CPc5MsJticBNY14qzatJkWYjb1IDfE/DnSLPff/\n\t izFWnnITDckqgghCZ1NWL9ZEGzv8M/4CYTuvhPBa+kx+qdO2Ww9klAoGqohNQsujRW\n\t SuOWLqG3DWsMg==","Received-SPF":"Pass (mailfrom) identity=mailfrom; client-ip=212.27.42.3;\n helo=smtp3-g21.free.fr; envelope-from=ju.o@free.fr; receiver=","DMARC-Filter":"OpenDMARC Filter v1.4.2 smtp1.osuosl.org 20AE180FF3","MIME-Version":"1.0","Date":"Thu, 16 Apr 2026 21:34:03 +0200","To":"Bernd Kuhls ","Cc":"buildroot@buildroot.org, Pierre-Jean Texier ","In-Reply-To":"<20260416073657.3605628-1-bernd@kuhls.net>","References":"<20260416073657.3605628-1-bernd@kuhls.net>","User-Agent":"Webmail Free/1.6.14","Message-ID":"<9254d97d1fb01a3e21d2a0f5e009d290@free.fr>","X-Sender":"ju.o@free.fr","X-Mailman-Original-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/simple;\n d=free.fr; s=smtp-20201208; t=1776368046;\n bh=YTY0tSVuPAnyZvPEuylD6uREdShJkwCdMxWjXbQcPQM=;\n h=Date:From:To:Cc:Subject:In-Reply-To:References:From;\n b=i0xnB53gOSal/CERPlogAyqqb9jO8mfO8dgT9Ao01JhC004U1kZ/z9PaYSfeOQLGT\n PKSbw2+frU5zTEkP9jj7NFUX6jNM277LZ728yM1YZu0Y9hfbfpIp5vQzK/wOok2yju\n A5/HVxKMaoe5KxLZcw4fmQhRWgir2P5NidYnR9PJB16QziLCM/nqFoXZjx4Rirny0C\n 8k9H3dXKOGAt+kny7SgclFbjGpSSDqbLLyNxe1d+3fsUZcvCrjz1tTb48s9PauyIcR\n vCsuIa44ex41H3subi+7I20FtlfnDRhEzylj4Oyv/JVh60KRK0M8aKJWCbSebct6A2\n BZEtaWgccaipw==","X-Mailman-Original-Authentication-Results":["smtp1.osuosl.org;\n dmarc=pass (p=quarantine dis=none)\n header.from=free.fr","smtp1.osuosl.org;\n dkim=pass (2048-bit key) header.d=free.fr header.i=@free.fr\n header.a=rsa-sha256 header.s=smtp-20201208 header.b=i0xnB53g"],"Subject":"Re: [Buildroot] [PATCH 1/1] package/libarchive: security bump\n version to 3.8.7","X-BeenThere":"buildroot@buildroot.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","From":"Julien Olivain via buildroot ","Reply-To":"Julien Olivain ","Content-Transfer-Encoding":"7bit","Content-Type":"text/plain; charset=\"us-ascii\"; Format=\"flowed\"","Errors-To":"buildroot-bounces@buildroot.org","Sender":"\"buildroot\" "}},{"id":3682123,"web_url":"http://patchwork.ozlabs.org/comment/3682123/","msgid":"<20260424162723.162056-1-thomas.perale@mind.be>","list_archive_url":null,"date":"2026-04-24T16:27:23","subject":"Re: [Buildroot] [PATCH 1/1] package/libarchive: security bump\n version to 3.8.7","submitter":{"id":87308,"url":"http://patchwork.ozlabs.org/api/people/87308/","name":"Thomas Perale","email":"thomas.perale@mind.be"},"content":"In reply of:\n> https://github.com/libarchive/libarchive/releases/tag/v3.8.7\n> \"Libarchive 3.8.7 is a security and bugfix release.\"\n> \n> Signed-off-by: Bernd Kuhls \n\nApplied to 2025.02.x & 2026.02.x. Thanks\n\n> ---\n> package/libarchive/libarchive.hash | 6 +++---\n> package/libarchive/libarchive.mk | 2 +-\n> 2 files changed, 4 insertions(+), 4 deletions(-)\n> \n> diff --git a/package/libarchive/libarchive.hash b/package/libarchive/libarchive.hash\n> index be357183e2..665259f2b6 100644\n> --- a/package/libarchive/libarchive.hash\n> +++ b/package/libarchive/libarchive.hash\n> @@ -1,6 +1,6 @@\n> -# From https://github.com/libarchive/libarchive/releases/tag/v3.8.6\n> +# From https://github.com/libarchive/libarchive/releases/tag/v3.8.7\n> # After verifying the pgp signature from:\n> -# https://www.libarchive.de/downloads/libarchive-3.8.6.tar.xz.asc\n> -sha256 8ac57c1f5e99550948d1fe755c806d26026e71827da228f36bef24527e372e6f libarchive-3.8.6.tar.xz\n> +# https://www.libarchive.de/downloads/libarchive-3.8.7.tar.xz.asc\n> +sha256 d3a8ba457ae25c27c84fd2830a2efdcc5b1d40bf585d4eb0d35f47e99e5d4774 libarchive-3.8.7.tar.xz\n> # Locally computed:\n> sha256 30e556b3959e3985d66efefec5eaac51d4995053caa1d3cffe6eb916f146f229 COPYING\n> diff --git a/package/libarchive/libarchive.mk b/package/libarchive/libarchive.mk\n> index 3b8fdbae1e..f11f5d8f6f 100644\n> --- a/package/libarchive/libarchive.mk\n> +++ b/package/libarchive/libarchive.mk\n> @@ -4,7 +4,7 @@\n> #\n> ################################################################################\n> \n> -LIBARCHIVE_VERSION = 3.8.6\n> +LIBARCHIVE_VERSION = 3.8.7\n> LIBARCHIVE_SOURCE = libarchive-$(LIBARCHIVE_VERSION).tar.xz\n> LIBARCHIVE_SITE = https://www.libarchive.de/downloads\n> LIBARCHIVE_INSTALL_STAGING = YES\n> -- \n> 2.47.3\n> \n> _______________________________________________\n> buildroot mailing list\n> buildroot@buildroot.org\n> https://lists.buildroot.org/mailman/listinfo/buildroot","headers":{"Return-Path":"","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@buildroot.org"],"Delivered-To":["patchwork-incoming-buildroot@legolas.ozlabs.org","buildroot@buildroot.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=bXfKtxZI;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=140.211.166.138; helo=smtp1.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)"],"Received":["from smtp1.osuosl.org (smtp1.osuosl.org [140.211.166.138])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g2JK93ChLz1y2d\n\tfor ;\n Sat, 25 Apr 2026 02:27:40 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id 3E7B684E96;\n\tFri, 24 Apr 2026 16:27:35 +0000 (UTC)","from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id AbKOz9528M7U; Fri, 24 Apr 2026 16:27:34 +0000 (UTC)","from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id D535D84EA5;\n\tFri, 24 Apr 2026 16:27:33 +0000 (UTC)","from smtp2.osuosl.org (smtp2.osuosl.org [IPv6:2605:bc80:3010::133])\n by lists1.osuosl.org (Postfix) with ESMTP id E8CFA194\n for ; Fri, 24 Apr 2026 16:27:26 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by smtp2.osuosl.org (Postfix) with ESMTP id DA78942389\n for ; Fri, 24 Apr 2026 16:27:26 +0000 (UTC)","from smtp2.osuosl.org ([127.0.0.1])\n by localhost (smtp2.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id OvwxvXJuidOo for ;\n Fri, 24 Apr 2026 16:27:26 +0000 (UTC)","from mail-wm1-x331.google.com (mail-wm1-x331.google.com\n [IPv6:2a00:1450:4864:20::331])\n by smtp2.osuosl.org (Postfix) with ESMTPS id C3105423E3\n for ; Fri, 24 Apr 2026 16:27:25 +0000 (UTC)","by mail-wm1-x331.google.com with SMTP id\n 5b1f17b1804b1-488ba840146so72267915e9.1\n for ; Fri, 24 Apr 2026 09:27:25 -0700 (PDT)","from arch ([79.132.248.48]) by smtp.gmail.com with ESMTPSA id\n 5b1f17b1804b1-4891c318636sm397673425e9.7.2026.04.24.09.27.23\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Fri, 24 Apr 2026 09:27:23 -0700 (PDT)"],"X-Virus-Scanned":["amavis at osuosl.org","amavis at osuosl.org"],"X-Comment":"SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver= ","DKIM-Filter":["OpenDKIM Filter v2.11.0 smtp1.osuosl.org D535D84EA5","OpenDKIM Filter v2.11.0 smtp2.osuosl.org C3105423E3"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1777048053;\n\tbh=yPBGMI+QrCqCFyAW9OZI8wP/cl30UxhfDPRCiZSfJCg=;\n\th=To:Cc:Date:In-Reply-To:References:Subject:List-Id:\n\t List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:\n\t From:Reply-To:From;\n\tb=bXfKtxZIj4fgYRIvnX4ogRQw8NRahpLEgSXhfrDW/o7RMHQq8UP9r6fv2QwG93fNX\n\t wVLC84APyueh4hIEiQylNaVj4zJ3cFossFfE8VQbmjM4Xb43DiAUeRLuqZ61YT4dLH\n\t IFu8qDRRTMS6ZR+wXkoh8z7SbbGQg/Iwiykv3e8Clftmke7mKDs/EGBnSDPPyG0H2W\n\t pt44+b7SETJB1gDnuzqWxNQF7nDnvoG55NM81NdH2qZxQxBMoTE8s4fudVW8GHD+6o\n\t aInuhu8NScPKeZEsHnOGSVGyalEHSE4K2cz4mpstGY/UXOvZmWCU6bVpXOsUiKsQW6\n\t hiNT7FbW2f2eg==","Received-SPF":"Pass (mailfrom) identity=mailfrom;\n client-ip=2a00:1450:4864:20::331; helo=mail-wm1-x331.google.com;\n envelope-from=thomas.perale@essensium.com; receiver=","DMARC-Filter":"OpenDMARC Filter v1.4.2 smtp2.osuosl.org C3105423E3","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1777048044; x=1777652844;\n h=content-transfer-encoding:mime-version:references:in-reply-to\n :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from\n :to:cc:subject:date:message-id:reply-to;\n bh=Ve1NRM9YtYJko15j3oOyYmqJDO3t9tw9n5fh4rKNxKo=;\n b=OFu+AaIewQwf8qhORMuA8+QR+ORmlb+Tagj+3OyjxMLkUk1kIxemLgFN18nFDYs5yz\n KGb+rKZQ6zCJaE0iy5oFUeTC1eTlu7hEHLMdQeMiTCMhMNDqHobtsLMyqCnIsMnLDN5g\n cKgtH3VBQ0xyGEaK7Pk6o48ktYUw4MXXRk7FA4rPUxsoz4qwwnmCH8OkH4DViaXbVXBA\n FoRtwTQz4xEm9Ti4FmshEW2QkkZepfqSw4i5I9eEzbp0oqV8ei3MN+Mf/VMou18a4gxl\n xhBvTkw9Rc+dtC3BFBh9muMxc/7P3RxTn/VDZ7MMYVcXx2q1Q4h4zM61xybkkgw+DIm4\n NgHg==","X-Forwarded-Encrypted":"i=1;\n AFNElJ+rqcS+Vbc0txDTSNGAcH3y33VJR6jJhrsYOwvjaIWDe5rX0Sg24eDSdz+cPF3rCpsrWAZvi7w/EbE=@buildroot.org","X-Gm-Message-State":"AOJu0YwSkHFWX04MHT+xjfXzHBKr6y8WySGUYvEzomEOeYi3GE1zKz05\n JXru0IS26fQ7pLm+ghXtP1JiWFsulsP39J3OEyL8oKi8dG1Yb6vAUmP7e8I+Swbf05U=","X-Gm-Gg":"AeBDievvreCWdddLM1vrQLaqHU4oGlmv7mCj1Q3iVsoKzAItiVZBaydRcYV0TnNcuue\n nx35TyteTZP0sYxWUe/r+QyUXZTMOHqAd2ty8FAxkkyb4AJqQwWjvOTrre8z4UHlk0IXF12RQa0\n kX+cibQ8pyWuYUHzf46jxnBNq9xjS8Sh9C0DQMwavkQiRPqPTWxkJ60QPRvfbY6ATgO+TXOMK+n\n +Q85EMCsId39pY+2AFDd7beXigcwhFXDKAaY3fyi19TaLZYyN2nyFuZpb4Lgd7KfmUk3rbmpNGg\n boWy7vihYbd9gOxQH2MYS045etYA9WiaGa/SO6IsfzIZgyOzpj6q8VxnnAFFkdvpM4YFSP9XYJX\n 8gydoV4a2fE+7bN1jy8/MLezncYUPEo7a8n4ZxEqKZaLzkytO4pG06ry/fp1QgEbXzSBUbLuiK5\n 3KnXVF6g5M9yARyLNqsp58heVaqQ==","X-Received":"by 2002:a05:600c:3110:b0:485:3abe:ab86 with SMTP id\n 5b1f17b1804b1-488fb739ce4mr448987525e9.4.1777048043830;\n Fri, 24 Apr 2026 09:27:23 -0700 (PDT)","To":"Bernd Kuhls ","Cc":"Thomas Perale ,\n\tbuildroot@buildroot.org","Date":"Fri, 24 Apr 2026 18:27:23 +0200","Message-ID":"<20260424162723.162056-1-thomas.perale@mind.be>","X-Mailer":"git-send-email 2.54.0","In-Reply-To":"<20260416073657.3605628-1-bernd@kuhls.net>","References":"<20260416073657.3605628-1-bernd@kuhls.net>","MIME-Version":"1.0","X-Mailman-Original-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=mind.be; s=google; t=1777048044; x=1777652844; darn=buildroot.org;\n h=content-transfer-encoding:mime-version:references:in-reply-to\n :message-id:date:subject:cc:to:from:from:to:cc:subject:date\n :message-id:reply-to;\n bh=Ve1NRM9YtYJko15j3oOyYmqJDO3t9tw9n5fh4rKNxKo=;\n b=KXyO1KtTb7oFE8vDHy80wpnQimxrI3A35jHahUlplFRw+j9pqd4ifjdvIIskVilshZ\n JidwqkGZXh7rT6W49U2h4/G88OEpE/KYUO+RIIUNzgoi1mTGtaVMLzBYI0sYoLPo3YGP\n eg6WXQIsdXVBZeQ2o7GEO4zReHjTBZE/44uqQtGKPTkMKt7Ma6/zNzcifma+Ua7cpFEP\n m79zbQIqYu5JUGupbXycP+nwPjLvGi5cjiP7BdG6fLUxJwpfdv9oRQ7YOECpf+rdWAM8\n mCI00QcC0gNGpHaqY5riRtzT0JW9vODkcNA2vkZ0iuCAUdr93UQYG9tN6oIARsRYtJrO\n SJkA==","X-Mailman-Original-Authentication-Results":["smtp2.osuosl.org;\n dmarc=pass (p=quarantine dis=none)\n header.from=mind.be","smtp2.osuosl.org;\n dkim=pass (2048-bit key) header.d=mind.be header.i=@mind.be\n header.a=rsa-sha256 header.s=google header.b=KXyO1KtT"],"Subject":"Re: [Buildroot] [PATCH 1/1] package/libarchive: security bump\n version to 3.8.7","X-BeenThere":"buildroot@buildroot.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","From":"Thomas Perale via buildroot ","Reply-To":"Thomas Perale ","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@buildroot.org","Sender":"\"buildroot\" "}}]