CVS log for pkgsrc/archivers/libarchive/Makefile

Up to [cvs.NetBSD.org] / pkgsrc / archivers / libarchive

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

libarchive: build without iconv; fix some pkglint warnings

libarchive: updated to 3.7.2

Libarchive 3.7.2 is a security, bugfix and feature release.

Security fixes:

Multiple vulnerabilities have been fixed in the PAX writer (1b4e0d0)
Important bugfixes:

bsdunzip(1) now correctly handles arguments following an -x after the zipfile
New features:

bsdunzip(1) now supports the "--version" flag
7-zip reader now translates Windows permissions into UNIX permissions
uudecode filter in raw mode now supports file name and file mode
zstd filter now supports the "long" write option


Libarchive 3.7.1 is a security, feature and bugfix release.

Security fixes:

SEGV and stack buffer overflow in verbose mode of cpio
Feature updates:

bsdunzip updated to match latest upstream code
Important bugfixes:

miscellaneous functional bugfixes
build fixes on multiple platforms


Libarchive 3.7.0 is a feature and bugfix release.

New features:

bsdunzip: new tool ported from FreeBSD
drop-in replacement for Info-ZIP unzip, not yet ported for Windows
7zip reader: support for Zstandard compression
7zip reader: support for ARM64 filter
zstd filter: support for multi-frame zstd archives
Other notable bugfixes and improvements:

pax: fix year 2038 problem on platforms with 64-bit time_t
Windows: Universal Windows Platform (UWP) fixes and improvements
Windows: bcrypt usage fixes and improvements
Windows: time function usage fixes and improvements

*: bump for openssl 3

libarchive: Update to 3.4.3

Libarchive 3.4.3 is a feature and bugfix release.

New features:

    support for pzstd compressed files (#1357)
    support for RHT.security.selinux tar extended attribute (#1348)

Important bugfixes:

    various zstd fixes and improvements (#1342 #1352 #1359)
    child process handling fixes (#1372)

Libarchive 3.4.2 is a feature and security release.

New features:

    support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
    support for mbed TLS (PolarSSL) (#1301)

Important bugfixes:

    security fixes in RAR5 reader (#1280 #1326)
    compression buffer fix in XAR writer (#1317)
    fix uname and gname longer than 32 characters in PAX writer (#1319)
    fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
    fix support for extracting 7z archive entries with Delta filter (#987)

Libarchive 3.4.1 is a feature and security release.

New features:

    Unicode filename support for reading lha/lzh archives
    New pax write option "xattrhdr"

Important bugfixes:

    security fixes in wide string processing (#1276 #1298)
    security fixes in RAR5 reader (#1212 #1217 #1296)
    security fixes and optimizations to write filter logic (#351)
    security fix related to use of readlink(2) (1dae5a5)
    sparse file handling fixes (#1218 #1260)

Thanks to all contributors and bug reporters.
Special thanks to Christos Zoulas (@zoulasc) from NetBSD for the atomic file extraction feature.

*: Recursive revision bump for openssl 1.1.1.

libarchive: updated to 3.3.3

libarchive 3.3.3:
Avoid super-linear slowdown on malformed mtree files
Many fixes for building with Visual Studio
NO_OVERWRITE doesn't change existing directory attributes
New support for Zstandard read and write filters

Update to libarchive-3.3.1:
- Various code bugs fixed as a result of fuzzing efforts.
- Better ACL support on Darwin and Solaris
- Support for NFSv4 ACLs in the pax format

Make WRKSRC files copied from FILESDIR writable

The contents of FILESDIR may or or may have the user write bit set.
They contain generated files (list.h), and libarchive's build system
recreates these files by opening them for writing without first
removing them.

Discussed on tech-pkg@; thanks to dholland@ for suggesting chmod -R as
both the simplest change and the one least likely to need adjusting.

The recent libarchive update changed the library major.  Increase the
ABI depends and perform a PKGREVISION bump for dependents.

Noticed by OSX binary package users.

libarchive-3.2.1nb1: Merge a number of bugfixes from upstream

(1) ctype misuse
(2) Don't depend on SIGRTMAX
(3) Link against libcrypto when using it for EVP support

Update build glue for libarchive 3.2.1.

Use OPSYSVARS.

Changes 3.1.2:
This is a maintenance update to fix issues with the new RAR seeking
feature. This new release also contains fixes for build failures when
building libarchive using Visual Studio 2012 and MinGW.

Pullup ticket #4388 - requested by he
archivers/libarchive: security patch

Revisions pulled up:
- archivers/libarchive/Makefile                                 1.40
- archivers/libarchive/files/libarchive/archive_read_support_format_iso9660.c 1.4
- archivers/libarchive/files/libarchive/archive_read_support_format_tar.c 1.4

---
   Module Name:	pkgsrc
   Committed By:	he
   Date:		Thu Apr  3 13:05:15 UTC 2014

   Modified Files:
   	pkgsrc/archivers/libarchive: Makefile
   	pkgsrc/archivers/libarchive/files/libarchive:
   	    archive_read_support_format_iso9660.c
   	    archive_read_support_format_tar.c

   Log Message:
   Apply fixes for CVE-2011-1777 and CVE-2011-1778 (add check for
   buffer overflows in handling iso9660 and tar images), despite
   Joerg telling me I should have better things to spend my time on.

   Fixes pulled from

     https://bugzilla.redhat.com/show_bug.cgi?id=705849

   Bump PKGREVISION.

Apply fixes for CVE-2011-1777 and CVE-2011-1778 (add check for
buffer overflows in handling iso9660 and tar images), despite
Joerg telling me I should have better things to spend my time on.

Fixes pulled from

  https://bugzilla.redhat.com/show_bug.cgi?id=705849

Bump PKGREVISION.

Recursive PKGREVISION bump for OpenSSL API version bump.

Pull in OpenSSL buildlink3 rather than disabling completely.

Requested by joerg.

Explicitly disable OpenSSL support, to prevent it from erroneously picking
up a system one regardless of PREFER_PKGSRC.

Bump PKGREVISION.

"user-destdir" is default these days

Add missing archivers/xz buildlink

Bump PKGREVISION

Workaround for PR 45491. It fixes bootstrap if
pkg://sfe/system/file-system/e2fsprogs@1.41.14 package is installed.
Approved by agc@.

Bump libarchive and bsdtar to 2.8.4.

libarchive 2.8.3 and bsdtar-2.8.3

Update build infrastructure for libarchive 2.8.2.

Update build rules for bsdtar and libarchive 2.8.0

Remove redundant NO_CHECKSUM and EXTRACT_ONLY definitions.

Update libarchive and bsdtar to 2.5.5.
This further polishes bsdcpio and brings in a number of portability
fixes.

Revert temporary hack to not use vfork on IRIX.

Add a temporary workaround for missing vfork on IRIX.
Fixes PR 38674, tested by tnn@.

Update build glue for libarchive 2.5.4b.

Update to libarchive-2.5.1b:
- Simplify character-translation logic.

pkgsrc:
Fix a bug in the linkresolver for tar format. When linkresolver is done,
the entry belongs to the caller, so don't keep a reference to it and use
the local copy for inode comparision.

Update libarchive and bsdtar to 1.5.0b.

- Improve hardlink handling of hardlinks in bsdcpio
- Extend linkify to handle all sane hardlink strategies
- Improve mtree support
- Make bsdtar and bsdcpio more like the NetBSD counterparts
- Drop uudecode dependency.

Update to bsdtar-2.4.14 and libarchive-2.4.14.

Update build infrastructure for libarchive-2.4.13.

Update to libarchive-2.4.0:
- portability fixes
- run format auction only once, simpler and more reliable
- speed up handling of uncompressed archives
- fix skipping of archive entries of exactly 4GB size on 32bit platforms
- fix reading files > 8 GB from tar archives
- many improvements for bsdcpio

Update libarchive to 2.2.8:
- bsdcpio now supports most of the older SUSv2 specs [not default yet]
- mtree reader to specify file arguments (experimental)
- handle gtar 1.17 sparse files (instead of the older 1.16)
- refined suid/sgid handling: it is optional if the bits can't be reset
  if owner restore is also not requested
- fixes for QNX from Sean Boudreau

Switch to in-tree libarchive-2.2.6.

Update libarchive to 2.2.5. Biggest changes are:
- massive performance improvements, up to 40% for bsdtar compared to 1.x
- support for external (de)compressors, ar-chives and many other goodies.

Pullup ticket 2144 - requested by lkundrak
security fix for libarchive

- pkgsrc/archivers/libarchive/Makefile			1.17
- pkgsrc/archivers/libarchive/distinfo			1.14
- pkgsrc/archivers/libarchive/patches/patch-ad		1.1

   Module Name:	pkgsrc
   Committed By:	lkundrak
   Date:		Fri Jul 13 09:26:32 UTC 2007

   Modified Files:
	   pkgsrc/archivers/libarchive: Makefile distinfo
   Added Files:
	   pkgsrc/archivers/libarchive/patches: patch-ad

   Log Message:
   Fix for FreeBSD-SA-07:05.libarchive CVE-2007-3641, CVE-2007-3644 and
   CVE-2007-3645.  PKGREVISION bump.

Fix for FreeBSD-SA-07:05.libarchive CVE-2007-3641, CVE-2007-3644 and
CVE-2007-3645.  PKGREVISION bump.

DESTDIR support.

Pullup ticket 1908 - requested by adrianp
security update for libarchive

Revisions pulled up:
- pkgsrc/archivers/libarchive/Makefile			1.15
- pkgsrc/archivers/libarchive/distinfo			1.13
- pkgsrc/archivers/libarchive/patches/patch-ac		1.1

   Module Name:		pkgsrc
   Committed By:	adrianp
   Date:		Fri Nov 10 00:29:44 UTC 2006

   Modified Files:
   	pkgsrc/archivers/libarchive: Makefile distinfo
   Added Files:
   	pkgsrc/archivers/libarchive/patches: patch-ac

   Log Message:
   Update to 1.3.1
   Sep 05, 2006: libarchive 1.3.1 released
   Sep 5, 2006: Bump version to 1.3 for new I/O wrappers.
   Sep 4, 2006: New memory and FILE read/write wrappers.
   Sep 4, 2006: libarchive test harness is now minimally functional;
       it's located a few minor bugs in error-handling logic

   Fix a denial of service security issue via FreeBSD:
   If the end of an archive is reached while attempting to "skip" past a
   region of an archive, libarchive will enter an infinite loop wherein it
   repeatedly attempts (and fails) to read further data.

Update to 1.3.1
Sep 05, 2006: libarchive 1.3.1 released
Sep 5, 2006: Bump version to 1.3 for new I/O wrappers.
Sep 4, 2006: New memory and FILE read/write wrappers.
Sep 4, 2006: libarchive test harness is now minimally functional;
    it's located a few minor bugs in error-handling logic

Fix a denial of service security issue via FreeBSD:
If the end of an archive is reached while attempting to "skip" past a
region of an archive, libarchive will enter an infinite loop wherein it
repeatedly attempts (and fails) to read further data.

Update to 1.2.57 which includes a better replacement for patch-aa.
While here, don't patch away tar.5, it is about the tape archive format
and not about bsdtar. It belongs into the package for that reason.

Update to libarchive-1.2.55, featuring minor bugfixes.

Update to 1.2.53:

* Incorporated Jaakko Heinonen's still-experimental support for extended
  attributes (Currently Linux-only.).
* Reorganized distribution package: There is now one tar.gz file that
  builds both libarchive and bsdtar.
* correctly read cpio device entries, write Pax attribute entry names.
* Experimental 'tp' format support in libarchive. Feedback appreciated;
  this is not enabled by archive_read_support_format_all()

Point MAINTAINER to pkgsrc-users@NetBSD.org in the case where no
developer is officially maintaining the package.

The rationale for changing this from "tech-pkg" to "pkgsrc-users" is
that it implies that any user can try to maintain the package (by
submitting patches to the mailing list).  Since the folks most likely
to care about the package are the folks that want to use it or are
already using it, this would leverage the energy of users who aren't
developers.

ENOTIME to mantain these packages, feel free to pick it up if you are
insterested.

Update to 1.02.036.

Changes:

	* Use GNU libtool to build shared libraries on many systems.

Update to 1.02.030, changes were bugfixes and documentation
improvements.

Update to 1.02.023.

Changes:

* Extended Zip/Zip64 support
* Bugfixes

Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.

Update to 1.02.016.

	o archive_read_extract can now handle very long pathnames
	  (tested with pathnames up to 1MB).
	o New dir-walk code now defaults to physical traversals.
	o fix a gzip decompression issue and add better error reporting
	  for certain file I/O and decompression errors.

Don't include <inttypes.h> unconditionally.  Unfortunately, HAVE_INTTYPES_H
is not available in the generated archive.h, so put in an __INTERIX
conditional (for now -- but this means a PKGREVISION bump, sigh).

Update to 1.02.006.

Changes:

# Feb 12, 2005: Fix a crash that affected Zip reading, make tree.c
                portable to Linux.
# Feb 8, 2005: Don't close stdout/stdin. Fix flush code.
# Feb 6, 2005: Fix bug in new dir-walk code with non-resolvable symlinks.
# Feb 6, 2005: Fix Linux build, flush input in archive_read_open_file()
               to avoid "broken pipe" warnings.

Add missing buildlink3 dependencies.

Initial import of libarchive-102.002.

Libarchive is a programming library that can create and read several 
different streaming archive formats, including most popular tar 
variants and several cpio formats. It can also write shar archives 
and read ISO9660 CDROM images.

See http://people.freebsd.org/~kientzle/libarchive/

Initial revision