Remove code added by 'JiaT75', the malicious actor that backdoored `xz`: https://github.com/libarchive/libarchive/pull/2101 At libarchive, they are reviewing all code contributed by this actor: https://github.com/libarchive/libarchive/issues/2103 See the original disclosure and subsequent discussion for more information about this incident: https://seclists.org/oss-sec/2024/q1/268 Patch copied from upstream source repository: https://github.com/libarchive/libarchive/pull/2101/commits/e200fd8abfb4cf895a1cab4d89b67e6eefe83942 From 6110e9c82d8ba830c3440f36b990483ceaaea52c Mon Sep 17 00:00:00 2001 From: Ed Maste Date: Fri, 29 Mar 2024 18:02:06 -0400 Subject: [PATCH] tar: make error reporting more robust and use correct errno (#2101) As discussed in #1609. --- tar/read.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/tar/read.c b/tar/read.c index af3d3f42..a7f14a07 100644 --- a/tar/read.c +++ b/tar/read.c @@ -371,8 +371,9 @@ read_archive(struct bsdtar *bsdtar, char mode, struct archive *writer) if (r != ARCHIVE_OK) { if (!bsdtar->verbose) safe_fprintf(stderr, "%s", archive_entry_pathname(entry)); - fprintf(stderr, ": %s: ", archive_error_string(a)); - fprintf(stderr, "%s", strerror(errno)); + safe_fprintf(stderr, ": %s: %s", + archive_error_string(a), + strerror(archive_errno(a))); if (!bsdtar->verbose) fprintf(stderr, "\n"); bsdtar->return_value = 1; -- 2.41.0 >
path: root/gnu/packages/crypto.scm
AgeCommit message (Expand)Author
2021-07-27gnu: Remove eschalot....As discussed in <https://bugs.gnu.org/46602>, eschalot does not support a current release of OpenSSL. * gnu/packages/crypto.scm (eschalot): Remove variable. Leo Famulari
2021-08-04gnu: Fix broken links to Arch Linux git repositories...* gnu/packages/crypto.scm (libsecp256k1): Update comment patch link. * gnu/packages/engineering.scm (freehdl): Update patch link. * gnu/packages/tex.scm (texlive-bin): Update arch-patch base URL. Signed-off-by: Ludovic Courtès <ludo@gnu.org> Milkey Mouse
2021-07-15gnu: libolm: Unbundle unused blob....* gnu/package/crypto.scm: (libolm)[source][snippet]: Delete "gradle-wrapper.jar". It is a bundled compiled (!) version of gradle. Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com> Maxime Devos
2021-07-08gnu: libolm: Respect "--without-tests"....* gnu/packages/libolm.scm (libolm)[arguments]<#:phases>{check}: Respect #:tests?. Signed-off-by: Mathieu Othacehe <othacehe@gnu.org> Maxime Devos
2021-05-29gnu: libolm: Update to 3.2.3....* gnu/packages/crypto.scm (libolm): Update to 3.2.3. Tobias Geerinckx-Rice