Re: [OE-core][PATCH] libarchive: upgrade 3.8.4 -> 3.8.5

["Antonin Godard" <antonin.godard@bootlin.com>]

Hi,

On Sat Jan 10, 2026 at 1:27 PM CET, Peter Marko via lists.openembedded.org wrote:
> From: Peter Marko <peter.marko@siemens.com>
>
> Fixes regression of fix for CVE-2025-60753
>
> Release notes [1]:
> Libarchive 3.8.5 is a bugfix release.
> Notable bugxies:
> * bsdtar: fix regression from 3.8.4 zero-length pattern issue bugfix (#2809)
> * various small bugfixes in code and documentation
>
> [1] https://github.com/libarchive/libarchive/releases/tag/v3.8.5
>
> Signed-off-by: Peter Marko <peter.marko@siemens.com>
> ---
>  .../libarchive/{libarchive_3.8.4.bb => libarchive_3.8.5.bb}     | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>  rename meta/recipes-extended/libarchive/{libarchive_3.8.4.bb => libarchive_3.8.5.bb} (96%)
>
> diff --git a/meta/recipes-extended/libarchive/libarchive_3.8.4.bb b/meta/recipes-extended/libarchive/libarchive_3.8.5.bb
> similarity index 96%
> rename from meta/recipes-extended/libarchive/libarchive_3.8.4.bb
> rename to meta/recipes-extended/libarchive/libarchive_3.8.5.bb
> index e89638f5c6..fcfaf5d231 100644
> --- a/meta/recipes-extended/libarchive/libarchive_3.8.4.bb
> +++ b/meta/recipes-extended/libarchive/libarchive_3.8.5.bb
> @@ -32,7 +32,7 @@ EXTRA_OECONF += "--enable-largefile --without-iconv"
>  SRC_URI = "https://libarchive.org/downloads/libarchive-${PV}.tar.gz"
>  UPSTREAM_CHECK_URI = "https://www.libarchive.org/"
>  
> -SRC_URI[sha256sum] = "b2c75b132a0ec43274d2867221befcb425034cd038e465afbfad09911abb1abb"
> +SRC_URI[sha256sum] = "8a60f3a7bfd59c54ce82ae805a93dba65defd04148c3333b7eaa2102f03b7ffd"
>  
>  inherit autotools update-alternatives pkgconfig
>  

After bisecting, I identified this patch to trigger errors on the Autobuilder,
such as:

  Exception: subprocess.CalledProcessError: Command 'tar --exclude=./sysroot-only -cf - -C /srv/pokybuild/yocto-worker/genericx86-64-alt/build/build/tmp/work/all-poky-linux/wayland-protocols/1.47/image -p -S . | tar -xf - -C /srv/pokybuild/yocto-worker/genericx86-64-alt/build/build/tmp/work/all-poky-linux/wayland-protocols/1.47/package' returned non-zero exit status 2.

  Subprocess output:
  got *at() syscall for unknown directory, fd 4
  unknown base path for fd 4, path share
  couldn't allocate absolute path for 'share'.
  tar: ./usr/share: Cannot mkdir: Bad address
  got *at() syscall for unknown directory, fd 4
  unknown base path for fd 4, path share
  couldn't allocate absolute path for 'share'.
  ...

https://autobuilder.yoctoproject.org/valkyrie/api/v2/logs/4904276/raw_inline
https://autobuilder.yoctoproject.org/valkyrie/#/builders/93/builds/3005

Full build:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/3034

Can you have a look?

Antonin

-- 
Antonin Godard, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com