Peter Marko 2654f4f66c libarchive: fix CVE-2025-60753 regression ...

Pick patch from PR mentioned in v3.8.5 release notes.

(From OE-Core rev: dc3d99c419a913e66cb73bf098291c21985b0432)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2026-01-26 09:49:25 +00:00

..

acpica

acpica: fix CVE-2024-24856

2024-06-26 05:04:39 -07:00

asciidoc

…

at

…

bash

bash: changes to SIGINT handler while waiting for a child

2023-12-12 04:20:34 -10:00

bc

…

blktool

…

bzip2

…

cpio

cpio: ignore CVE-2023-7216

2024-12-09 07:54:03 -08:00

cracklib

cracklib: Modify patch to compile with GCC 14

2024-11-02 06:32:36 -07:00

cronie

…

cups

cups: allow unknown directives in conf files

2026-01-26 09:49:25 +00:00

cwautomacros

…

diffutils

diffutils: update 3.9 -> 3.10

2023-08-02 04:47:13 -10:00

ed

…

ethtool

…

findutils

…

gawk

gawk: backport Debian patch to fix CVE-2023-4156

2023-10-25 04:45:50 -10:00

ghostscript

ghostscript: patch CVE-2025-59800

2025-10-14 07:20:35 -07:00

go-examples

go-helloworld: fix license

2025-08-18 13:18:01 -07:00

gperf

…

grep

…

groff

…

gzip

…

hdparm

…

images

…

iptables

…

iputils

iputils: patch CVE-2025-48964

2025-07-18 08:32:26 -07:00

less

less: backport Debian patch for CVE-2024-32487

2024-05-15 09:44:14 -07:00

libaio

…

libarchive

libarchive: fix CVE-2025-60753 regression

2026-01-26 09:49:25 +00:00

libidn

…

libmnl

…

libnsl

…

libnss-nis

libnss-nis: upgrade 3.1 -> 3.2

2023-08-26 04:24:02 -10:00

libpipeline

…

libsolv

…

libtirpc

…

lighttpd

…

logrotate

logrotate: Do not create logrotate.status file

2023-07-21 06:27:34 -10:00

lsb

…

lsof

…

ltp

…

lzip

…

man-db

…

man-pages

man-pages: remove conflict pages

2024-06-26 05:04:39 -07:00

mc

…

mdadm

mdadm: add util-linux-blockdev ptest dependency

2023-08-26 04:24:02 -10:00

mingetty

…

minicom

minicom: remove unused patch files

2023-07-01 08:37:24 -10:00

msmtp

…

net-tools

net-tools: patch CVE-2025-46836

2025-06-20 08:06:29 -07:00

newt

…

packagegroups

…

pam

libpam: fix CVE-2025-6020

2025-07-30 07:47:48 -07:00

parted

…

pbzip2

…

perl

…

pigz

…

procps

procps: replaced one use of fputs(3) with a write(2) call

2025-02-24 07:00:54 -08:00

psmisc

psmisc: Set ALTERNATIVE for pstree to resolve conflict with busybox

2023-07-01 08:37:24 -10:00

quota

…

rpcbind

…

rpcsvc-proto

…

screen

screen: fix CVE-2025-46804

2025-06-13 08:42:35 -07:00

sed

…

shadow

shadow: Fix CVE-2023-4641

2023-09-30 09:43:59 -10:00

slang

…

stress-ng

stress-ng: avoid calling sync during do_compile

2024-03-25 04:11:26 -10:00

sudo

sudo: remove devtool FIXME comment

2025-09-08 08:27:11 -07:00

sysklogd

sysklogd: fix integration with systemd-journald

2023-09-08 16:09:42 -10:00

sysstat

sysstat: correct the SRC_URI

2025-06-04 09:06:31 -07:00

tar

tar: upgrade 1.34 -> 1.35

2023-09-23 05:26:15 -10:00

tcp-wrappers

…

texinfo

…

texinfo-dummy-native

…

time

…

timezone

tzdata/tzcode-native: upgrade 2025a -> 2025b

2025-05-02 08:12:41 -07:00

unzip

unzip: Fix configure tests to use modern C

2024-12-16 05:58:03 -08:00

watchdog

…

wget

wget: fix CVE-2024-10524

2025-01-24 07:49:28 -08:00

which

…

xdg-utils

xdg-utils: Fix CVE-2022-4055

2023-10-18 05:13:24 -10:00

xinetd

…

xz

xz: Update LICENSE variable for xz packages

2025-06-20 08:06:30 -07:00

zip

zip: Fix build with gcc-14

2024-11-02 06:32:36 -07:00

zstd

zstd: patch CVE-2022-4899

2024-11-11 06:19:18 -08:00