archivers/libarchive: Fix CVE 2022-36227

Backport upstream commit bff38efe8c110469c5080d387bec62a6ca15b1a5 PR: 268190 Reviewed by: glewis (maintainer)
freebsd · Dec 6, 2022 · 8841574 · 8841574
1 parent 142858a
commit 8841574
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/archivers/libarchive/Makefile b/archivers/libarchive/Makefile
@@ -1,10 +1,14 @@
 PORTNAME=	libarchive
 DISTVERSION=	3.6.1
+PORTREVISION=	1
 PORTEPOCH=	1
 CATEGORIES=	archivers
 MASTER_SITES=	https://github.com/${PORTNAME}/${PORTNAME}/releases/download/v${DISTVERSION}/ \
 		https://libarchive.org/downloads/
 
+PATCH_SITES=	https://github.com/${PORTNAME}/${PORTNAME}/commit/
+PATCHFILES=	bff38efe8c110469c5080d387bec62a6ca15b1a5.patch:-p1
+
 MAINTAINER=	glewis@FreeBSD.org
 COMMENT=	Library to create and read several streaming archive formats
 WWW=		https://libarchive.org/

diff --git a/archivers/libarchive/distinfo b/archivers/libarchive/distinfo
@@ -1,3 +1,5 @@
-TIMESTAMP = 1649489686
+TIMESTAMP = 1670315616
 SHA256 (libarchive-3.6.1.tar.xz) = 5a411aceb978f43e626f0c2d1812ddd8807b645ed892453acabd532376c148e6
 SIZE (libarchive-3.6.1.tar.xz) = 5241148
+SHA256 (bff38efe8c110469c5080d387bec62a6ca15b1a5.patch) = 4f93c5a102cce1fc672d59888471017b545704bfa9d762c630e84b28215162e7
+SIZE (bff38efe8c110469c5080d387bec62a6ca15b1a5.patch) = 1124