Thanks, applied as a319d59d9aca53ce6b9a83373bbe7405b0663432. Michael
[sent from post-receive hook] On Fri, 23 Jan 2026 16:02:05 +0100, Christian Melki <[email protected]> wrote: > Various security plus mostly bugfixes. > https://github.com/libarchive/libarchive/releases/tag/v3.8.2 > https://github.com/libarchive/libarchive/releases/tag/v3.8.3 > https://github.com/libarchive/libarchive/releases/tag/v3.8.4 > https://github.com/libarchive/libarchive/releases/tag/v3.8.5 > > Plugs CVE: > CVE-2025-25724: tar reader: fix checking the result of the strftime > > * Add global config option. > > Signed-off-by: Christian Melki <[email protected]> > Message-Id: <[email protected]> > Signed-off-by: Michael Olbrich <[email protected]> > > diff --git a/rules/libarchive.make b/rules/libarchive.make > index c506b644d306..28348ee794ae 100644 > --- a/rules/libarchive.make > +++ b/rules/libarchive.make > @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_LIBARCHIVE) += libarchive > # > # Paths and names > # > -LIBARCHIVE_VERSION := 3.8.1 > -LIBARCHIVE_MD5 := 29353cd50c2146601b708a80307a5a76 > +LIBARCHIVE_VERSION := 3.8.5 > +LIBARCHIVE_MD5 := 2226a84d3720b1a3d00deb0d11530a60 > LIBARCHIVE := libarchive-$(LIBARCHIVE_VERSION) > LIBARCHIVE_SUFFIX := tar.gz > LIBARCHIVE_URL := > https://www.libarchive.org/downloads/$(LIBARCHIVE).$(LIBARCHIVE_SUFFIX) > @@ -50,6 +50,7 @@ LIBARCHIVE_CONF_OPT := \ > --disable-xattr \ > --disable-acl \ > $(GLOBAL_LARGE_FILE_OPTION) \ > + --$(call ptx/endis, PTXDIST_Y2038)-year2038 \ > --with-zlib \ > --$(call ptx/wwo, PTXCONF_LIBARCHIVE_BZIP2)-bz2lib \ > --without-libb2 \
