]> code.ossystems Code Review - openembedded-core.git/commit
libarchive : update to 3.5.3
authorLee Chee Yang <chee.yang.lee@intel.com>
Thu, 24 Feb 2022 02:41:22 +0000 (10:41 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 25 Feb 2022 12:39:00 +0000 (12:39 +0000)
commit5b00b0e015312264cdb3fd88b6f4a8df456316c3
tree730cbfb57790888d44a243845ec78f6ccfc60eb9
parentc8f8fe5a4f57febb1fb9b54f53d2a0b95f01179b
libarchive : update to 3.5.3

Libarchive 3.5.3 is a security release

Security Fixes:

extended fix for following symlinks when processing the fixup list (#1566, #1617, CVE-2021-31566)
fix invalid memory access and out of bounds read in RAR5 reader (#1491, #1492, #1493, CVE-2021-36976)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-extended/libarchive/libarchive_3.5.3.bb [moved from meta/recipes-extended/libarchive/libarchive_3.5.2.bb with 96% similarity]