backport upstream patch to fix possibly malicious past commit (see https://github.com/libarchive/libarchive/pull/2101 ) [release 3.7.2-2mamba;Fri Apr 05 2024]

libarchive-3.7.2-backport_bsdtar_make_error_reporting_more_robust.patch

@@ -0,0 +1,27 @@
+From 6110e9c82d8ba830c3440f36b990483ceaaea52c Mon Sep 17 00:00:00 2001
+From: Ed Maste <emaste@freebsd.org>
+Date: Fri, 29 Mar 2024 18:02:06 -0400
+Subject: [PATCH] tar: make error reporting more robust and use correct errno
+ (#2101)
+
+As discussed in #1609.
+---
+ tar/read.c | 5 +++--
+ 1 file changed, 3 insertions(+), 2 deletions(-)
+
+diff --git a/tar/read.c b/tar/read.c
+index af3d3f423..a7f14a07b 100644
+--- a/tar/read.c
++++ b/tar/read.c
+@@ -371,8 +371,9 @@ read_archive(struct bsdtar *bsdtar, char mode, struct archive *writer)
+ 			if (r != ARCHIVE_OK) {
+ 				if (!bsdtar->verbose)
+ 					safe_fprintf(stderr, "%s", archive_entry_pathname(entry));
+-				fprintf(stderr, ": %s: ", archive_error_string(a));
+-				fprintf(stderr, "%s", strerror(errno));
++				safe_fprintf(stderr, ": %s: %s",
++				    archive_error_string(a),
++				    strerror(archive_errno(a)));
+ 				if (!bsdtar->verbose)
+ 					fprintf(stderr, "\n");
+ 				bsdtar->return_value = 1;

libarchive.spec

@@ -1,27 +1,31 @@
 Name:          libarchive
-Version:       3.2.1
-Release:       1mamba
+Version:       3.7.2
+Release:       2mamba
 Summary:       Single library to read/write tar, cpio, pax, zip, iso9660, etc.
 Group:         System/Libraries
 Vendor:        openmamba
 Distribution:  openmamba
-Packager:      Davide Madrisan <davide.madrisan@gmail.com>
-URL:           http://libarchive.org/
-Source:        http://www.libarchive.org/downloads/libarchive-%{version}.tar.gz
+Packager:      Silvan Calarco <silvan.calarco@mambasoft.it>
+URL:           https://libarchive.org/
+Source:        https://github.com/libarchive/libarchive.git/v%{version}/libarchive-%{version}.tar.bz2
+Patch0:        libarchive-3.7.2-backport_bsdtar_make_error_reporting_more_robust.patch
 License:       BSD
 ## AUTOBUILDREQ-BEGIN
 BuildRequires: glibc-devel
 BuildRequires: libacl-devel
-BuildRequires: libattr-devel
+BuildRequires: libb2-devel
 BuildRequires: libbzip2-devel
+BuildRequires: libgomp-devel
+BuildRequires: liblz4-devel
 BuildRequires: liblzma-devel
 BuildRequires: liblzo-devel
 BuildRequires: libnettle-devel
+BuildRequires: libopenssl-devel
 BuildRequires: libxml2-devel
 BuildRequires: libz-devel
+BuildRequires: libzstd-devel
 ## AUTOBUILDREQ-END
 BuildRequires: libe2fs-devel
-BuildRoot:     %{_tmppath}/%{name}-%{version}-root
 
 %description
 Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants.
@@ -52,15 +56,23 @@ This package contains the following programs built on libarchive:
  - bsdcpio
     A different interface to cpio with essentially the same functionality.
 
+%debug_package
+
 %prep
 %setup -q
+%patch 0 -p1 -b .backport_bsdtar_make_error_reporting_more_robust
+
+autoreconf -f -i
 
 %build
 %configure \
    --enable-shared \
    --disable-static \
+   --enable-bsdcat=shared \
    --enable-bsdtar=shared \
    --enable-bsdcpio=shared \
+   --with-lzo2 \
+   --with-nettle \
    --enable-largefile
 
 %make
@@ -69,6 +81,9 @@ This package contains the following programs built on libarchive:
 [ "%{buildroot}" != / ] && rm -rf "%{buildroot}"
 %makeinstall
 
+# Don't require unexisting pkgconfig(iconv)
+sed -i "s/iconv //" %{buildroot}%{_libdir}/pkgconfig/libarchive.pc
+
 mv %{buildroot}%{_mandir}/man5/cpio.5 %{buildroot}%{_mandir}/man5/archive_cpio.5
 mv %{buildroot}%{_mandir}/man5/tar.5 %{buildroot}%{_mandir}/man5/archive_tar.5
 
@@ -87,25 +102,89 @@ mv %{buildroot}%{_mandir}/man5/tar.5 %{buildroot}%{_mandir}/man5/archive_tar.5
 %defattr(-,root,root)
 %{_includedir}/archive_entry.h
 %{_includedir}/archive.h
-%{_libdir}/libarchive.la
 %{_libdir}/libarchive.so
 %{_libdir}/pkgconfig/libarchive.pc
 %{_mandir}/man3/*
 %{_mandir}/man5/*
 %doc examples
 %doc contrib/libarchive_autodetect-st_lib_archive.m4
-%doc NEWS README
+%doc NEWS
 
 %files tools
 %defattr(-,root,root)
 %{_bindir}/bsdcat
 %{_bindir}/bsdcpio
 %{_bindir}/bsdtar
+%{_bindir}/bsdunzip
 %{_mandir}/man1/bsdcat.1*
 %{_mandir}/man1/bsdcpio.1*
 %{_mandir}/man1/bsdtar.1*
+%{_mandir}/man1/bsdunzip.1*
 
 %changelog
+* Fri Apr 05 2024 Silvan Calarco <silvan.calarco@mambasoft.it> 3.7.2-2mamba
+- backport upstream patch to fix possibly malicious past commit (see https://github.com/libarchive/libarchive/pull/2101 )
+
+* Tue Sep 12 2023 Automatic Build System <autodist@mambasoft.it> 3.7.2-1mamba
+- automatic version update by autodist
+
+* Sun Jul 30 2023 Automatic Build System <autodist@mambasoft.it> 3.7.1-1mamba
+- automatic version update by autodist
+
+* Sat Jul 22 2023 Automatic Build System <autodist@mambasoft.it> 3.7.0-1mamba
+- automatic version update by autodist
+
+* Fri Dec 30 2022 Silvan Calarco <silvan.calarco@mambasoft.it> 3.6.2-2mamba
+- remove requirement for unexisting pkgconfig(iconv)
+
+* Sat Dec 17 2022 Automatic Build System <autodist@mambasoft.it> 3.6.2-1mamba
+- automatic version update by autodist
+
+* Sat Apr 09 2022 Automatic Build System <autodist@mambasoft.it> 3.6.1-1mamba
+- automatic version update by autodist
+
+* Thu Feb 10 2022 Automatic Build System <autodist@mambasoft.it> 3.6.0-1mamba
+- automatic version update by autodist
+
+* Wed Feb 09 2022 Automatic Build System <autodist@mambasoft.it> 3.5.3-1mamba
+- automatic version update by autodist
+
+* Sat Dec 04 2021 Silvan Calarco <silvan.calarco@mambasoft.it> 3.5.2-1mamba
+- update to 3.5.2
+
+* Thu Dec 31 2020 Silvan Calarco <silvan.calarco@mambasoft.it> 3.5.0-2mamba
+- rebuilt with debug package
+
+* Thu Dec 03 2020 Automatic Build System <autodist@mambasoft.it> 3.5.0-1mamba
+- automatic version update by autodist
+
+* Fri May 22 2020 Automatic Build System <autodist@mambasoft.it> 3.4.3-1mamba
+- automatic version update by autodist
+
+* Thu Feb 13 2020 Automatic Build System <autodist@mambasoft.it> 3.4.2-1mamba
+- automatic version update by autodist
+
+* Wed Jan 01 2020 Automatic Build System <autodist@mambasoft.it> 3.4.1-1mamba
+- automatic version update by autodist
+
+* Fri Aug 02 2019 Silvan Calarco <silvan.calarco@mambasoft.it> 3.4.0-1mamba
+- update to 3.4.0
+
+* Sat Sep 08 2018 Automatic Build System <autodist@mambasoft.it> 3.3.3-1mamba
+- automatic version update by autodist
+
+* Sat Aug 05 2017 Automatic Build System <autodist@mambasoft.it> 3.3.2-1mamba
+- automatic version update by autodist
+
+* Wed Mar 01 2017 Automatic Build System <autodist@mambasoft.it> 3.3.1-1mamba
+- automatic version update by autodist
+
+* Fri Feb 24 2017 Automatic Build System <autodist@mambasoft.it> 3.3.0-1mamba
+- automatic version update by autodist
+
+* Sun Dec 18 2016 Automatic Build System <autodist@mambasoft.it> 3.2.2-1mamba
+- automatic version update by autodist
+
 * Mon Jul 04 2016 Automatic Build System <autodist@mambasoft.it> 3.2.1-1mamba
 - automatic version update by autodist