[ptxdist] [PATCH] libarchive: Version bump. 3.8.1 -> 3.8.5

[ptxdist] [PATCH] libarchive: Version bump. 3.8.1 -> 3.8.5

[Christian Melki]

Various security plus mostly bugfixes.
https://github.com/libarchive/libarchive/releases/tag/v3.8.2
https://github.com/libarchive/libarchive/releases/tag/v3.8.3
https://github.com/libarchive/libarchive/releases/tag/v3.8.4
https://github.com/libarchive/libarchive/releases/tag/v3.8.5

Plugs CVE:
CVE-2025-25724: tar reader: fix checking the result of the strftime

* Add global config option.

Signed-off-by: Christian Melki <christian.melki@t2data.com>
---
 rules/libarchive.make | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/rules/libarchive.make b/rules/libarchive.make
index c506b644d..28348ee79 100644
--- a/rules/libarchive.make
+++ b/rules/libarchive.make
@@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_LIBARCHIVE) += libarchive
 #
 # Paths and names
 #
-LIBARCHIVE_VERSION	:= 3.8.1
-LIBARCHIVE_MD5		:= 29353cd50c2146601b708a80307a5a76
+LIBARCHIVE_VERSION	:= 3.8.5
+LIBARCHIVE_MD5		:= 2226a84d3720b1a3d00deb0d11530a60
 LIBARCHIVE		:= libarchive-$(LIBARCHIVE_VERSION)
 LIBARCHIVE_SUFFIX	:= tar.gz
 LIBARCHIVE_URL		:= https://www.libarchive.org/downloads/$(LIBARCHIVE).$(LIBARCHIVE_SUFFIX)
@@ -50,6 +50,7 @@ LIBARCHIVE_CONF_OPT	:= \
 	--disable-xattr \
 	--disable-acl \
 	$(GLOBAL_LARGE_FILE_OPTION) \
+	--$(call ptx/endis, PTXDIST_Y2038)-year2038 \
 	--with-zlib \
 	--$(call ptx/wwo, PTXCONF_LIBARCHIVE_BZIP2)-bz2lib \
 	--without-libb2 \
-- 
2.43.0

Re: [ptxdist] [APPLIED] libarchive: Version bump. 3.8.1 -> 3.8.5

[Michael Olbrich]

Thanks, applied as a319d59d9aca53ce6b9a83373bbe7405b0663432.

Michael

[sent from post-receive hook]

On Fri, 23 Jan 2026 16:02:05 +0100, Christian Melki <christian.melki@t2data.com> wrote:
> Various security plus mostly bugfixes.
> https://github.com/libarchive/libarchive/releases/tag/v3.8.2
> https://github.com/libarchive/libarchive/releases/tag/v3.8.3
> https://github.com/libarchive/libarchive/releases/tag/v3.8.4
> https://github.com/libarchive/libarchive/releases/tag/v3.8.5
> 
> Plugs CVE:
> CVE-2025-25724: tar reader: fix checking the result of the strftime
> 
> * Add global config option.
> 
> Signed-off-by: Christian Melki <christian.melki@t2data.com>
> Message-Id: <20260112193243.1117702-1-christian.melki@t2data.com>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
> 
> diff --git a/rules/libarchive.make b/rules/libarchive.make
> index c506b644d306..28348ee794ae 100644
> --- a/rules/libarchive.make
> +++ b/rules/libarchive.make
> @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_LIBARCHIVE) += libarchive
>  #
>  # Paths and names
>  #
> -LIBARCHIVE_VERSION	:= 3.8.1
> -LIBARCHIVE_MD5		:= 29353cd50c2146601b708a80307a5a76
> +LIBARCHIVE_VERSION	:= 3.8.5
> +LIBARCHIVE_MD5		:= 2226a84d3720b1a3d00deb0d11530a60
>  LIBARCHIVE		:= libarchive-$(LIBARCHIVE_VERSION)
>  LIBARCHIVE_SUFFIX	:= tar.gz
>  LIBARCHIVE_URL		:= https://www.libarchive.org/downloads/$(LIBARCHIVE).$(LIBARCHIVE_SUFFIX)
> @@ -50,6 +50,7 @@ LIBARCHIVE_CONF_OPT	:= \
>  	--disable-xattr \
>  	--disable-acl \
>  	$(GLOBAL_LARGE_FILE_OPTION) \
> +	--$(call ptx/endis, PTXDIST_Y2038)-year2038 \
>  	--with-zlib \
>  	--$(call ptx/wwo, PTXCONF_LIBARCHIVE_BZIP2)-bz2lib \
>  	--without-libb2 \