Fabrice Fontaine 2b71ed27a5 package/libarchive: security bump to version 3.4.2 ...

- Fix CVE-2020-9308: archive_read_support_format_rar5.c in libarchive
  before 3.4.2 attempts to unpack a RAR5 file with an invalid or
  corrupted header (such as a header size of zero), leading to a SIGSEGV
  or possibly unspecified other impact.
- use --with-nettle to enable nettle support, see
  f96a71144b

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
[yann.morin.1998@free.fr:
  - drop new optional dependency to mbedtsl, forced off for now
]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 6785c19bf5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2020-03-14 18:34:20 +01:00

..

Config.in

…

libarchive.hash

package/libarchive: security bump to version 3.4.2

2020-03-14 18:34:20 +01:00

libarchive.mk

package/libarchive: security bump to version 3.4.2

2020-03-14 18:34:20 +01:00