[Buildroot] [git commit] package/libarchive: security bump to version 3.8.2

Julien Olivain ju.o at free.fr
Sun Oct 19 17:27:42 UTC 2025


commit: https://git.buildroot.net/buildroot/commit/?id=a36b7cf77e7d44e7abf5c939baabc67e030282e8
branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/master

This bump includes the security fix for CVE-2025-25724.

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-25724.

Release notes:
https://github.com/libarchive/libarchive/releases/tag/v3.8.2

Signed-off-by: Dario Binacchi <dario.binacchi at amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o at free.fr>
---
 package/libarchive/libarchive.hash | 4 ++--
 package/libarchive/libarchive.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package/libarchive/libarchive.hash b/package/libarchive/libarchive.hash
index b8738e4a99..f31b693c67 100644
--- a/package/libarchive/libarchive.hash
+++ b/package/libarchive/libarchive.hash
@@ -1,5 +1,5 @@
 # Locally computed after verifying the signature from
-# https://www.libarchive.de/downloads/libarchive-3.8.1.tar.xz.asc
-sha256  19f917d42d530f98815ac824d90c7eaf648e9d9a50e4f309c812457ffa5496b5  libarchive-3.8.1.tar.xz
+# https://www.libarchive.de/downloads/libarchive-3.8.2.tar.xz.asc
+sha256  db0dee91561cbd957689036a3a71281efefd131d35d1d98ebbc32720e4da58e2  libarchive-3.8.2.tar.xz
 # Locally computed:
 sha256  30e556b3959e3985d66efefec5eaac51d4995053caa1d3cffe6eb916f146f229  COPYING
diff --git a/package/libarchive/libarchive.mk b/package/libarchive/libarchive.mk
index 1dafec726b..8568847493 100644
--- a/package/libarchive/libarchive.mk
+++ b/package/libarchive/libarchive.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBARCHIVE_VERSION = 3.8.1
+LIBARCHIVE_VERSION = 3.8.2
 LIBARCHIVE_SOURCE = libarchive-$(LIBARCHIVE_VERSION).tar.xz
 LIBARCHIVE_SITE = https://www.libarchive.de/downloads
 LIBARCHIVE_INSTALL_STAGING = YES


More information about the buildroot mailing list