Vijay Anusuri fc72adbf80 libarchive: Fix CVE-2026-4111 ...

Pick patch according to [1]

[1] https://security-tracker.debian.org/tracker/CVE-2026-4111
[2] https://github.com/libarchive/libarchive/pull/2877
[3] https://access.redhat.com/errata/RHSA-2026:5080

(From OE-Core rev: 9af05e2d56ed355c02722a24ee66b2b0d4097cb9)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>

2026-04-10 11:53:18 +01:00

..

acpica

acpica: fix CVE-2024-24856

2024-06-26 05:04:39 -07:00

asciidoc

…

at

at: Change when files are copied

2023-01-26 23:37:05 +00:00

bash

bash: changes to SIGINT handler while waiting for a child

2023-12-12 04:20:34 -10:00

bc

bc: extend to nativesdk

2022-12-23 23:05:50 +00:00

blktool

…

bzip2

…

cpio

cpio: ignore CVE-2023-7216

2024-12-09 07:54:03 -08:00

cracklib

cracklib: Modify patch to compile with GCC 14

2024-11-02 06:32:36 -07:00

cronie

cronie: upgrade 1.6.0 -> 1.6.1

2022-05-20 10:08:06 +01:00

cups

cups: allow unknown directives in conf files

2026-01-26 09:49:25 +00:00

cwautomacros

…

diffutils

diffutils: update 3.9 -> 3.10

2023-08-02 04:47:13 -10:00

ed

…

ethtool

…

findutils

…

gawk

gawk: backport Debian patch to fix CVE-2023-4156

2023-10-25 04:45:50 -10:00

ghostscript

ghostscript: patch CVE-2025-59800

2025-10-14 07:20:35 -07:00

go-examples

go-helloworld: fix license

2025-08-18 13:18:01 -07:00

gperf

gperf: Switch to upstream patch

2022-07-25 15:11:46 +01:00

grep

…

groff

groff: submit patches upstream

2022-11-24 15:30:01 +00:00

gzip

gzip: upgrade 1.11 -> 1.12

2022-04-10 08:31:17 +01:00

hdparm

…

images

…

iptables

…

iputils

iputils: patch CVE-2025-48964

2025-07-18 08:32:26 -07:00

less

less: backport Debian patch for CVE-2024-32487

2024-05-15 09:44:14 -07:00

libaio

…

libarchive

libarchive: Fix CVE-2026-4111

2026-04-10 11:53:18 +01:00

libidn

libidn2: add Unicode-DFS-2016 license

2022-04-14 09:47:00 +01:00

libmnl

…

libnsl

…

libnss-nis

libnss-nis: upgrade 3.1 -> 3.2

2023-08-26 04:24:02 -10:00

libpipeline

…

libsolv

…

libtirpc

libtirpc: Check if file exists before operating on it

2023-02-04 23:32:20 +00:00

lighttpd

lighttpd: upgrade 1.4.66 -> 1.4.67

2022-11-10 14:39:24 +00:00

logrotate

logrotate: Do not create logrotate.status file

2023-07-21 06:27:34 -10:00

lsb

…

lsof

lsof: fix old override syntax

2023-02-15 21:46:56 +00:00

ltp

ltp: backport clock_gettime04 fix from upstream

2022-11-09 17:42:08 +00:00

lzip

…

man-db

…

man-pages

man-pages: remove conflict pages

2024-06-26 05:04:39 -07:00

mc

…

mdadm

mdadm: add util-linux-blockdev ptest dependency

2023-08-26 04:24:02 -10:00

mingetty

…

minicom

minicom: remove unused patch files

2023-07-01 08:37:24 -10:00

msmtp

…

net-tools

net-tools: patch CVE-2025-46836

2025-06-20 08:06:29 -07:00

newt

libnewt: update 0.52.21 -> 0.52.23

2023-01-06 17:33:23 +00:00

packagegroups

…

pam

libpam: re-add missing libgen include

2026-03-20 09:55:33 +00:00

parted

udev-extraconf/initrdscripts/parted: Rename mount.blacklist -> mount.ignorelist

2022-07-25 15:11:46 +01:00

pbzip2

…

perl

…

pigz

…

procps

procps: replaced one use of fputs(3) with a write(2) call

2025-02-24 07:00:54 -08:00

psmisc

psmisc: Set ALTERNATIVE for pstree to resolve conflict with busybox

2023-07-01 08:37:24 -10:00

quota

…

rpcbind

…

rpcsvc-proto

…

screen

screen: fix CVE-2025-46804

2025-06-13 08:42:35 -07:00

sed

sed: Specify shell for "nobody" user in run-ptest

2022-05-20 10:08:06 +01:00

shadow

shadow: Fix CVE-2023-4641

2023-09-30 09:43:59 -10:00

slang

…

stress-ng

stress-ng: avoid calling sync during do_compile

2024-03-25 04:11:26 -10:00

sudo

sudo: remove devtool FIXME comment

2025-09-08 08:27:11 -07:00

sysklogd

sysklogd: fix integration with systemd-journald

2023-09-08 16:09:42 -10:00

sysstat

sysstat: correct the SRC_URI

2025-06-04 09:06:31 -07:00

tar

tar: upgrade 1.34 -> 1.35

2023-09-23 05:26:15 -10:00

tcp-wrappers

tcp-wrappers: Fix implicit-function-declaration warnings

2022-08-28 07:51:30 +01:00

texinfo

…

texinfo-dummy-native

…

time

…

timezone

tzdata/tzcode-native: upgrade 2025c -> 2026a

2026-04-10 11:53:17 +01:00

unzip

unzip: Fix configure tests to use modern C

2024-12-16 05:58:03 -08:00

watchdog

watchdog: Include needed system header for function decls

2022-09-03 13:09:49 +01:00

wget

wget: fix CVE-2024-10524

2025-01-24 07:49:28 -08:00

which

…

xdg-utils

xdg-utils: Fix CVE-2022-4055

2023-10-18 05:13:24 -10:00

xinetd

xinetd: Pass missing -D_GNU_SOURCE

2022-09-03 13:09:49 +01:00

xz

xz: Update LICENSE variable for xz packages

2025-06-20 08:06:30 -07:00

zip

zip: Fix build with gcc-14

2024-11-02 06:32:36 -07:00

zstd

zstd: patch CVE-2022-4899

2024-11-11 06:19:18 -08:00