Changelog for bsdtar-3.1.2-20.3.1.x86_64.rpm :
Wed Oct 10 14:00:00 2018 Adrian Schröter
- CVE-2017-14503.patch: CVE-2017-14501 bsc#1057514 bsc#1059139
CVE-2016-10209.patch: bsc#1032089
CVE-2016-10349.patch: bsc#1037008
- is also fixing CVE-2016-10350 and bsc#1037009
CVE-2017-14166.patch: bsc#1057514
CVE-2017-14502.patch: bsc#1059134

Tue Oct 18 14:00:00 2016 adrianAATTsuse.com
- CVE-2016-8687.patch: bsc#1005070
CVE-2016-8689.patch: bsc#1005072
CVE-2016-8688.patch: bsc#1005076
CVE-2016-5844.patch: bsc#986566, upstream issue 717
CVE-2015-8915.patch: bsc#985691, upstream issue 502
CVE-2016-6250.patch: bsc#989980, upstream issue 711
CVE-2016-5418.patch: bsc#998677, upstream issues 744, 745 and 746
rename directory-traversal-fix.patch to CVE-2015-2304.patch

Tue Jun 21 14:00:00 2016 adrianAATTsuse.de
- Adding more security fixes:
CVE-2015-8924.patch: bsc#985609, upstream issue 515
CVE-2015-8932.patch: bsc#985665, upstream issue 547
CVE-2015-8929.patch: bsc#985669, upstream issue 517
CVE-2015-8934.patch: bsc#985673, upstream issue 521
CVE-2015-8920.patch: bsc#985675, upstream issue 511
CVE-2015-8928.patch: bsc#985679, upstream issue 550
CVE-2015-8921.patch: bsc#985682, upstream issue 512
CVE-2015-8922.patch: bsc#985685, upstream issue 513
CVE-2015-8933.patch: bsc#985688, upstream issue 548 & 582
- lacks test cases since they need new support functions
CVE-2015-8931.patch: bsc#985689, upstream issue 539
CVE-2015-8916.patch: bsc#985694, upstream issue 504
CVE-2015-8918.patch. bsc#985698, upstream issue 506
CVE-2015-8919.patch: bsc#985697, upstream issue 510
CVE-2015-8930.patch: bsc#985700, upstream issue 522
CVE-2015-8923.patch: bsc#985703, upstream issue 514
CVE-2015-8926.patch: bsc#985704, upstream issue 518
CVE-2015-8925.patch: bsc#985706, upstream issue 516
CVE-2016-4300.patch: bsc#985832
CVE-2016-4301.patch, CVE-2016-4301-base.patch: bsc#985826, upstream issue 523
CVE-2016-4302.patch: bsc#985835, upstream issue 718

Thu Jun 16 14:00:00 2016 adrianAATTsuse.de
- limit size of symlinks in cpio archives (CVE-2016-4809, bsc#984990)
CVE-2016-4809.patch

Mon May 9 14:00:00 2016 adrianAATTsuse.de
- Fix CVE-2016-1541 (bsc#979005)

Thu Mar 5 13:00:00 2015 adrianAATTsuse.com
- fix a directory traversal in cpio tool (bnc#920870) CVE-2015-2304

Tue Nov 11 13:00:00 2014 jsegitzAATTnovell.com
- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)

Sun Nov 24 13:00:00 2013 andreas.stiegerAATTgmx.de
- add optional -static-devel library package, intended to publish pixz
for CentOS / RHEL, default off
- skip some dependencies not required for pixz on CentOS / RHEL

Tue Aug 20 14:00:00 2013 crrodriguezAATTopensuse.org
- remove artificial dependencies on libacl-devel, libbz2-devel,
zlib-devel from libarchive-devel.

Mon Aug 19 14:00:00 2013 crrodriguezAATTopensuse.org
- libarchive-openssl.patch: Call OPENSSL_config where needed,
otherwise on systems configured to use openSSL engines such
as via-padlock wont benefit from hardware acceleration.

Fri Aug 16 14:00:00 2013 andreas.stiegerAATTgmx.de
- update to 3.1.2
This is a maintenance update to fix issues with the new RAR
seeking feature.
- libarchive\'s new website moved to http://www.libarchive.org.

Sun Jun 16 14:00:00 2013 jengelhAATTinai.de
- Explicitly list libattr-devel as BuildRequires (and sort those)

Wed Feb 13 13:00:00 2013 wernerAATTsuse.de
- Use %libname macro to be consistent throughout the spec file

Tue Feb 5 13:00:00 2013 p.drouandAATTgmail.com
- Update to version 3.1.1:
+ Fix an issue with the soname versioning in builds of libarchive
using cmake
- Removed patchs; fixed and merged on upstream release:

* libarchive-fix-checks.patch

* libarchive-ppc64.patch
- The soname has changed and pass to 13.

Thu Aug 23 14:00:00 2012 dvaleevAATTsuse.com
- libarchive-ppc64.patch:
fix http://code.google.com/p/libarchive/issues/detail?id=277
test_option_b and test_option_nodump are failing on ppc64

Thu Aug 9 14:00:00 2012 cfarrellAATTsuse.com
- license update: BSD-2-Clause
The COPYING file shows that the package is predominantly BSD-2-Clause
licensed

Tue Aug 7 14:00:00 2012 dimstarAATTopensuse.org
- Update to version 3.0.4:
+ libarchive development moved to http://libarchive.github.com/
- Changes from version 3.0.2:
+ Various fixes merged from FreeBSD
+ Symlink support in Zip reader and writer
+ Robustness fixes to 7Zip reader
- Changes from version 3.0.1b:
+ 7Zip reader
+ Small fixes to ISO and Zip to improve robustness with corrupted
input
+ Improve streaming Zip reader\'s support for uncompressed entries
+ New seeking Zip reader supports SFX Zip archives
+ Build fixes on Windows
- For more changes since 2.8.5, please see NEWS file
- Update URL Tag to represent new home of the project.
- Rename libarchive2 to libarchive12, following upstreams soname
bumps.
- Add libarchive-fix-checks.patch: Fix gcc 4.7 side effects.
- Drop libarchive-test-fuzz.patch: fixed upstream.
- Drop libarchive-ignore-sigpipe-in-test-suite.patch: fixed
upstream.
- Drop libarchive-2.5.5_handle_ENOSYS_from_lutimes.patch: upstream
rejected the patch. Seems to be too theoretical problem.

Mon May 7 14:00:00 2012 wernerAATTsuse.de
- Enforce usage of reentrant versions of libc functions

Mon Feb 13 13:00:00 2012 dvaleevAATTsuse.com
- fix failed tests on ppc

Wed Feb 8 13:00:00 2012 idonmezAATTsuse.com
- Use %makeinstall to be SLES compatible

Thu Dec 22 13:00:00 2011 wernerAATTsuse.de
- For SLES11 work around missing rpm macro

Tue Dec 6 13:00:00 2011 cooloAATTsuse.com
- rename main package to libarchive

Tue Dec 6 13:00:00 2011 cooloAATTsuse.com
- Update to libarchive 2.8.5 (from werner)

* Fix issue 134: Improve handling of open failures

* Fix issue 119: Relax ISO verification

* Fix issue 121: mtree parsing

* Fix extraction of GNU tar \'D\' directory entries

* Be less demanding in LZMA/XZ compression tests

Fri Sep 30 14:00:00 2011 cooloAATTsuse.com
- add baselibs.conf for PackageKit to use

Tue Apr 19 14:00:00 2011 idoenmezAATTnovell.com
- Add suport for xz and xar archives
- Add libarchive-2.8.4-iso9660-data-types.patch:
fix ISO9660 reader data type mismatches

Thu Nov 11 13:00:00 2010 puzelAATTnovell.com
- udpate to libarchive-2.8.4
- see /usr/share/doc/packages/libarchive2/NEWS for changes
- drop libarchive-2.5.5_fix_testsuite.patch (upstream)
- update libarchive-2.5.5_handle_ENOSYS_from_lutimes.patch
- clean up specfile
- disable make check for now

Wed Jan 6 13:00:00 2010 jengelhAATTmedozas.de
- enable parallel building