-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 02 Jun 2024 16:38:00 +0200 Source: libarchive Binary: libarchive-dev libarchive-tools libarchive-tools-dbgsym libarchive13 libarchive13-dbgsym Architecture: arm64 Version: 3.6.2-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-conova-04) Changed-By: Salvatore Bonaccorso Description: libarchive-dev - Multi-format archive and compression library (development files) libarchive-tools - FreeBSD implementations of 'tar' and 'cpio' and other archive too libarchive13 - Multi-format archive and compression library (shared library) Closes: 1068047 1072107 Changes: libarchive (3.6.2-1+deb12u1) bookworm-security; urgency=high . [ Peter Pentchev ] * Add the robust-error-reporting upstream patch. Closes: #1068047 . [ Salvatore Bonaccorso ] * fix: OOB in rar e8 filter (CVE-2024-26256) (Closes: #1072107) * fix: OOB in rar delta filter * fix: OOB in rar audio filter Checksums-Sha1: 1f1913969245ece1b131cee998c9db7b2ae08f2a 542568 libarchive-dev_3.6.2-1+deb12u1_arm64.deb 0d7351508e903e88edf129aec0a2b1a3b3bbe003 95360 libarchive-tools-dbgsym_3.6.2-1+deb12u1_arm64.deb ef554d67766ce3ac2f1e5df1ed9ba455b91ad12a 71740 libarchive-tools_3.6.2-1+deb12u1_arm64.deb 92e7e4ae51f174a1499016cda8cc0c36f0311726 1020688 libarchive13-dbgsym_3.6.2-1+deb12u1_arm64.deb 2dd94a9a328174c2733d67d44d400ad7e3759238 315856 libarchive13_3.6.2-1+deb12u1_arm64.deb 3195b8f2b8b7ccc799afe81e225ccf6446ad32f2 7765 libarchive_3.6.2-1+deb12u1_arm64-buildd.buildinfo Checksums-Sha256: 19c7b7329cb91460f3d265d39badfe04a92602cf2584ec914341014a4cac8664 542568 libarchive-dev_3.6.2-1+deb12u1_arm64.deb 5d6d1a06abc3aace80860fca20ac868c8c985cce16be667444a100dc1e882898 95360 libarchive-tools-dbgsym_3.6.2-1+deb12u1_arm64.deb 914466cfc193236c0bb8c4160944d6286334fcd84832b6ff9a893ad0ccaa3ae7 71740 libarchive-tools_3.6.2-1+deb12u1_arm64.deb 23d9d1e53269257721886c8ec5bbdff5b1e6b7aeb1e68ecbc3b9244742cd2546 1020688 libarchive13-dbgsym_3.6.2-1+deb12u1_arm64.deb b318a7cdd033840ac276fa594b4c69fce4589fbc6f954dfa15245512f770425f 315856 libarchive13_3.6.2-1+deb12u1_arm64.deb 4e46adf64375b8c9510fefd51b87a4daa552dab10751635f2e5a749ca1649932 7765 libarchive_3.6.2-1+deb12u1_arm64-buildd.buildinfo Files: 684f7156cf04eee97565a6d04e20863f 542568 libdevel optional libarchive-dev_3.6.2-1+deb12u1_arm64.deb 2d943aa7a37be8a15f738026c79daefd 95360 debug optional libarchive-tools-dbgsym_3.6.2-1+deb12u1_arm64.deb dc7efd9c65a1067cd3998c97fa283997 71740 utils optional libarchive-tools_3.6.2-1+deb12u1_arm64.deb 09eb5cb6bb5de68e6d2c9d75b3a94db2 1020688 debug optional libarchive13-dbgsym_3.6.2-1+deb12u1_arm64.deb a5757fcdb2f9cc934f63fc5681558d0d 315856 libs optional libarchive13_3.6.2-1+deb12u1_arm64.deb af9660f96f34e94f0ad9fae14fce8a6c 7765 libs optional libarchive_3.6.2-1+deb12u1_arm64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEElif5H+pIB11ZS5Aay8vyjiVDuNYFAmZckOkACgkQy8vyjiVD uNbW4A/+PVaH/qYQbYW8ZKPitVcRkAhT6DOtjwupYQ0RbhosnE9wy4E6T6jxNBNy BvStXbbtgG+9mpWjd0jAZ2s+eZKYhvs8xXjFBg7BHcS651Lh1goKd6b2bUu+hZsT p5DYCIoYUBvaOzxnOryWkcUuLcjqNYJ2UuSRUniDsniwIJx4y8wHpgAte2HB5WnA hEMMGgbwH0p/d46WZt2fKKYtcJaTPILxl8lnkxTVS0yMHvF68PisC6fFjkNEMHHk +6DfFMEsEHmjulKZ8Wmba5+d6jOJGqHrE3ZT4hsKt8o+Lp3oGzwjQUI8mgeGykft uSMFqraXVWJyipGh5+8Jc2OPZWQWIEmexNYL5vNvoni6K2yEoLBLa1RTANixgri+ +XDw1Qlc8Hap/GxPn92EGXCvrVGLr/msbbEvS2YCOobSkxfLZtd/WqzuKCh0doLF lkbYjvW1h7csYVlLP/rEvDxyk5ItVE7jX1LB2h2Y4zjrh42f7MP15FxBvW+yxOd4 4Ov1Ag9ivTXgJ1miscyb10MpxkPuZbG+XyheADVzmvENGuxDpkQaidC/kH95ivwP DGA96XA9oWwIe8v6YWnXBDVjijiGNlhUY9EiOq4Z9oNjz1RvYAXVbnFfOYXijTGE 6/mXY2UuSS962MW7DF3+oVBjWWaLVZCFxqWCeHLrm3O6vycrG6g= =vY7c -----END PGP SIGNATURE-----