Version bump after the xz debacle. libarchive was affected by the same malicious user and 3.7.3 has reviewed relevant commits.
https://github.com/libarchive/libarchive/releases/tag/v3.7.3 https://github.com/libarchive/libarchive/issues/2103 Signed-off-by: Christian Melki <christian.me...@t2data.com> --- rules/libarchive.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/libarchive.make b/rules/libarchive.make index eb22652aa..267d8c0fe 100644 --- a/rules/libarchive.make +++ b/rules/libarchive.make @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_LIBARCHIVE) += libarchive # # Paths and names # -LIBARCHIVE_VERSION := 3.7.2 -LIBARCHIVE_MD5 := dfaf015d642da9235bdd8270460928f7 +LIBARCHIVE_VERSION := 3.7.3 +LIBARCHIVE_MD5 := a6bf48d0d4f4974c4eac58341ced1227 LIBARCHIVE := libarchive-$(LIBARCHIVE_VERSION) LIBARCHIVE_SUFFIX := tar.gz LIBARCHIVE_URL := https://www.libarchive.org/downloads/$(LIBARCHIVE).$(LIBARCHIVE_SUFFIX) -- 2.34.1