Hello community,

here is the log from the commit of package libarchive for openSUSE:Factory 
checked in at 2016-06-13 21:48:32
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/libarchive (Old)
 and      /work/SRC/openSUSE:Factory/.libarchive.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "libarchive"

Changes:
--------
--- /work/SRC/openSUSE:Factory/libarchive/libarchive.changes    2015-10-01 
09:27:16.000000000 +0200
+++ /work/SRC/openSUSE:Factory/.libarchive.new/libarchive.changes       
2016-06-13 21:48:33.000000000 +0200
@@ -1,0 +2,21 @@
+Mon May  9 08:42:19 UTC 2016 - adr...@suse.de
+
+- 4GB _constraints for ppc64le only, it would break other archs
+
+- update to version 3.2.0
+  * Fixes CVE-2016-1541
+  * changes are only documented in git history
+  * updated openssl patch
+  * new bsdcat utility
+
+- removed obsolete patches for:
+  * CVE-2013-0211.patch
+  * directory-traversal-fix.patch
+  * libarchive-xattr.patch
+
+-------------------------------------------------------------------
+Fri May  6 14:45:14 UTC 2016 - norm...@linux.vnet.ibm.com
+
+- add _constraints memory 4096MB to avoid ppc64le build failure
+
+-------------------------------------------------------------------

Old:
----
  CVE-2013-0211.patch
  directory-traversal-fix.patch
  libarchive-3.1.2.tar.gz
  libarchive-xattr.patch

New:
----
  _constraints
  libarchive-3.2.0.tar.gz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ libarchive.spec ++++++
--- /var/tmp/diff_new_pack.BP7wke/_old  2016-06-13 21:48:35.000000000 +0200
+++ /var/tmp/diff_new_pack.BP7wke/_new  2016-06-13 21:48:35.000000000 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package libarchive
 #
-# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -33,7 +33,7 @@
 %define libname libarchive%{somajor}
 
 Name:           libarchive
-Version:        3.1.2
+Version:        3.2.0
 Release:        0
 Summary:        Creates and reads several different streaming archive formats
 License:        BSD-2-Clause
@@ -56,11 +56,6 @@
 BuildRequires:  xz-devel
 BuildRequires:  zlib-devel
 Patch0:         libarchive-openssl.patch
-Patch1:         libarchive-xattr.patch
-# PATCH-FIX-UPSTREAM bnc#800024
-Patch2:         CVE-2013-0211.patch
-# PATCH-FIX-UPSTREAM bnc#920870
-Patch3:         directory-traversal-fix.patch
 
 %description
 Libarchive is a programming library that can create and read several
@@ -167,13 +162,8 @@
 %prep
 %setup -q
 %if %{with openssl}
-%patch0
+%patch0 -p0
 %endif
-%if !0%{?skip_autoreconf}
-%patch1 -p1
-%endif
-%patch2 -p1
-%patch3 -p1
 
 %build
 %if !0%{?skip_autoreconf}
@@ -203,8 +193,9 @@
 
 %files -n bsdtar
 %defattr(-,root,root)
-%{_bindir}/bsdtar
+%{_bindir}/bsdcat
 %{_bindir}/bsdcpio
+%{_bindir}/bsdtar
 %{_mandir}/man1/*
 %{_mandir}/man5/*
 

++++++ _constraints ++++++
<constraints>
  <overwrite>
    <conditions>
      <arch>ppc64</arch>
      <arch>ppc64le</arch>
    </conditions>
    <hardware>
      <physicalmemory>
        <size unit="M">4096</size>
      </physicalmemory>
    </hardware>
  </overwrite>
</constraints>
++++++ libarchive-3.1.2.tar.gz -> libarchive-3.2.0.tar.gz ++++++
++++ 113357 lines of diff (skipped)

++++++ libarchive-openssl.patch ++++++
--- /var/tmp/diff_new_pack.BP7wke/_old  2016-06-13 21:48:36.000000000 +0200
+++ /var/tmp/diff_new_pack.BP7wke/_new  2016-06-13 21:48:36.000000000 +0200
@@ -1,5 +1,7 @@
---- libarchive/archive_crypto.c.orig
-+++ libarchive/archive_crypto.c
+Index: libarchive/archive_digest.c
+===================================================================
+--- libarchive/archive_digest.c.orig
++++ libarchive/archive_digest.c
 @@ -207,6 +207,7 @@ __archive_nettle_md5final(archive_md5_ct
  static int
  __archive_openssl_md5init(archive_md5_ctx *ctx)
@@ -48,13 +50,15 @@
    EVP_DigestInit(ctx, EVP_sha512());
    return (ARCHIVE_OK);
  }
---- libarchive/archive_crypto_private.h.orig
-+++ libarchive/archive_crypto_private.h
-@@ -135,6 +135,7 @@
-   defined(ARCHIVE_CRYPTO_SHA512_OPENSSL)
- #define       ARCHIVE_CRYPTO_OPENSSL 1
+Index: libarchive/archive_cryptor_private.h
+===================================================================
+--- libarchive/archive_cryptor_private.h.orig
++++ libarchive/archive_cryptor_private.h
+@@ -100,6 +100,7 @@ typedef struct {
+ 
+ #elif defined(HAVE_LIBCRYPTO)
  #include <openssl/evp.h>
 +#include <openssl/conf.h>
- #endif
+ #define AES_BLOCK_SIZE        16
+ #define AES_MAX_KEY_SIZE 32
  
- /* Windows crypto headers */


Reply via email to