package/libarchive: security bump to version 3.5.2
authorFabrice Fontaine <fontaine.fabrice@gmail.com>
Tue, 24 Aug 2021 19:50:06 +0000 (21:50 +0200)
committerArnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Wed, 25 Aug 2021 19:48:12 +0000 (21:48 +0200)
commita223dd4aef256bf1c63881353399e4a18f7c43bc
tree6626a4916e62222141befed4afd837e2a4a984ca
parenta4a4330b73d494201ec72ea40fc34e96fb41faf3
package/libarchive: security bump to version 3.5.2

Fix CVE-2021-36976: libarchive 3.4.1 through 3.5.1 has a use-after-free
in copy_string (called from do_uncompress_block and process_block).

https://github.com/libarchive/libarchive/releases/tag/v3.5.2

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
package/libarchive/libarchive.hash
package/libarchive/libarchive.mk