Commit Graph

56 Commits

Author SHA1 Message Date
naddy
0a7b6c018e devel/libarchive: Drop Requires.private field from pkgconfig file.
Some failures will otherwise result in dependent ports since we do
not have a pkg-config file for iconv.
Reported and analyzed by sthen@
2022-12-12 20:45:36 +00:00
naddy
b4a6d343b6 archivers/libarchive: update to 3.6.2 2022-12-11 21:41:16 +00:00
naddy
4d25451a83 Cherry pick two upstream fixes that may have security implications:
* Handle a 'calloc' returning NULL
* Validate entry_bytes_remaining in pax_attribute

Requested by tj@
2022-08-01 19:36:28 +00:00
naddy
297872d47c archivers/libarchive: update to 3.6.1 2022-04-28 22:21:50 +00:00
tj
6768df7c28 backport four more upstream security fixes:
ISO reader: fix possible heap buffer overflow in read_children()
RAR reader: fix heap-use-after-free in RAR (v4) filter code
RAR reader: fix null-dereference in RAR (v4) filter code
RAR reader: fix heap-use-after-free in run_filters()

ok naddy
2022-04-04 19:29:12 +00:00
tj
fb26a05b22 backport upstream patch to fix an out-of-bounds read
ok naddy
2022-03-29 20:50:46 +00:00
naddy
69de5bdc39 drop RCS Id from all ports where I'm listed as MAINTAINER 2022-03-08 14:27:46 +00:00
naddy
4cb1261acd archivers/libarchive: update to 3.6.0
New features:
* tar: new option "--no-read-sparse"
* tar: threads support for zstd
* RAR reader: filter support
* RAR5 reader: self-extracting archive support
* ZIP reader: zstd decompression support
2022-02-24 22:54:43 +00:00
naddy
610ff872b0 archivers/libarchive: use upstream patch 2021-08-30 13:21:24 +00:00
naddy
38507792b1 archivers/libarchive: update to 3.5.2
New features:
* CPIO: Support for PWB and v7 binary cpio formats
* ZIP reader: Support of deflate algorithm in symbolic link decompression
2021-08-27 14:37:59 +00:00
naddy
181bf3e6c4 update to libarchive-3.5.1 2020-12-27 19:09:02 +00:00
naddy
bc1d9ea680 maintenance update to 3.5.0 2020-12-03 16:51:56 +00:00
naddy
6ff3a59ebb update to 3.4.3 2020-05-30 15:50:38 +00:00
naddy
c4ba9282a9 maintenance update to 3.4.2 2020-02-21 22:18:44 +00:00
naddy
d7dd84b019 maintenance update to 3.4.1 2020-01-03 21:53:19 +00:00
espie
94ac4af802 add DEBUG_PACKAGES, okay naddy@ (maintainer) 2019-11-19 13:27:44 +00:00
naddy
bd17a1654f Update to 3.4.0:
* Fixes for reading Android APK and JAR archives
* Support for non-recursive list and extract
* New tar option: --exclude-vcs
* Important fixes for storing file attributes and flags
* Support for xz, lzma, ppmd8 and bzip2 decompression in ZIP files
* RAR 5.0 reader
2019-06-18 20:30:01 +00:00
naddy
af84161ede Update to 3.3.3:
* Avoid super-linear slowdown on malformed mtree files
* NO_OVERWRITE doesn't change existing directory attributes
* New support for Zstandard read and write filters
... plus unmentioned bug fixes.
2018-09-07 13:25:02 +00:00
sthen
3e9ebaa783 we have HMAC_CTX_free, *HMAC_CTX_new now 2018-02-18 14:57:47 +00:00
jsing
25cc3e86e3 Use the LibreSSL provided EVP_MD_CTX_*() functions.
ok sthen@
2018-02-18 11:24:57 +00:00
naddy
2d618326f6 Maintenance update to 3.3.2.
libarchive no longer builds with lzo2 support.  This was already lost
accidentally in the previous update.
2017-07-13 19:31:14 +00:00
naddy
e5bd991759 Update to 3.3.1. No list of changes available, but fixes many
security problems.
2017-03-10 20:07:24 +00:00
naddy
c60572d146 SECURITY update to 3.2.2.
Numerous bugs appear to have been fixed, but there is no log of changes.
2016-11-01 10:40:50 +00:00
naddy
cb3c01cc50 Security update to 3.2.1.
This release fixes several critical bugs, including some with security
implications.  (At least CVE-2016-4300, CVE-2016-4301.)
2016-06-23 20:19:36 +00:00
naddy
a10cd49ab2 Oops, add library bump and forgotten patch file. 2016-05-26 20:42:59 +00:00
naddy
228abeda46 Update to 3.2.0. Notable changes include:
* Incorporate patches for crash and overflow bugs
* Add support for lz4 compression
* Add bsdcat command-line tool

Also avoid picking up ext2fs header; reported by rpe@
2016-05-26 20:31:37 +00:00
naddy
91abebf71b replace libiconv module with library dependency 2016-04-06 14:16:58 +00:00
naddy
c253f424ca garbage collect CONFIGURE_SHARED 2016-03-11 19:59:11 +00:00
naddy
e2dd70eb66 Apply patches for multiple security vulnerablities;
- CVE-2013-0211: denial of service via unspecified vectors
- CVE-2015-2304: directory traveral via absolute paths
- crash/infinite loop on malformed CPIO archives

From upstream git (commits 2253154, 5935715, 3865cf2, e6c9668, 24f5de6)
via FreeBSD.

Minor bump for the new ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS option.
2016-01-30 23:34:44 +00:00
naddy
074951595a update to 3.1.2; with jasper@ 2015-04-04 11:05:19 +00:00
brad
ffe6844fac sync distinfo and merge in PFRAG.shared.
ok sthen@
2013-04-04 16:03:55 +00:00
ajacoutot
58f1a6f9f6 USE_LIBTOOL=Yes is the default now. 2013-03-21 08:45:11 +00:00
espie
c80849c13c regress -> test
PERMIT_* cleanup
2013-03-10 22:28:04 +00:00
naddy
aeffab6838 update to 3.0.4 2012-04-27 23:01:52 +00:00
naddy
4bf918340f update to 3.0.3 2012-04-01 10:50:47 +00:00
naddy
9e7e4c3a87 maintenance update to 2.8.5 2011-09-16 15:06:19 +00:00
espie
2314c85f45 convert to new style depends
zap default spec that are not needed
convert libspecs as well
convert p* to REVISION.

No package changes
2010-11-15 00:22:45 +00:00
naddy
e31f897ea2 don't preformat the man pages now that man(1) calls mandoc(1) 2010-10-30 17:27:03 +00:00
naddy
4be689a796 ports that preformat man pages with mandoc via bsd.man.mk don't need groff 2010-10-19 21:04:52 +00:00
espie
b02283c3fe LIB_DEPENDS -> WANTLIB 2010-10-19 19:45:53 +00:00
espie
3ed7d907a5 USE_GROFF=Yes 2010-10-18 16:47:00 +00:00
naddy
667c7e5294 maintenance update to 2.8.4, no changes of note 2010-09-13 17:10:31 +00:00
naddy
e66668aa3e update to 2.8.3 2010-04-05 11:36:55 +00:00
naddy
240776a6c0 pre-format man pages with mandoc(1) instead of groff on a FreeBSD system 2010-04-04 15:02:05 +00:00
naddy
229b8b94c5 update to 2.7.1 and switch dependency from lzma to xz 2009-09-10 15:31:43 +00:00
sturm
8325678e2f remove -Werror to unbreak build on sparc64
This code seems to trigger a gcc bug, resulting in spurious format warnings.

ok naddy
2009-05-15 05:10:04 +00:00
naddy
1fb40b7366 update to 2.7.0 2009-04-18 18:22:49 +00:00
naddy
1bfb4a027a maintenance update to 2.6.2 2009-03-08 21:50:34 +00:00
naddy
78dd235a9a update to 2.6.1, project has moved to Google Code 2009-01-24 18:32:07 +00:00
naddy
543e6508f1 update to 2.6.0 2009-01-01 16:46:25 +00:00