[Buildroot] [git commit branch/2025.02.x] package/libarchive: security bump to version 3.8.2

Arnout Vandecappelle arnout at rnout.be
Thu Oct 30 07:56:08 UTC 2025


commit: https://git.buildroot.net/buildroot/commit/?id=eb9e46aaf5571674f40f636c929de8d20ffc8e8c
branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/2025.02.x

This bump includes the security fix for CVE-2025-25724.

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-25724.

Release notes:
https://github.com/libarchive/libarchive/releases/tag/v3.8.2

Signed-off-by: Dario Binacchi <dario.binacchi at amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o at free.fr>
(cherry picked from commit a36b7cf77e7d44e7abf5c939baabc67e030282e8)
Signed-off-by: Thomas Perale <thomas.perale at mind.be>
---
 package/libarchive/libarchive.hash | 4 ++--
 package/libarchive/libarchive.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package/libarchive/libarchive.hash b/package/libarchive/libarchive.hash
index b8738e4a99..f31b693c67 100644
--- a/package/libarchive/libarchive.hash
+++ b/package/libarchive/libarchive.hash
@@ -1,5 +1,5 @@
 # Locally computed after verifying the signature from
-# https://www.libarchive.de/downloads/libarchive-3.8.1.tar.xz.asc
-sha256  19f917d42d530f98815ac824d90c7eaf648e9d9a50e4f309c812457ffa5496b5  libarchive-3.8.1.tar.xz
+# https://www.libarchive.de/downloads/libarchive-3.8.2.tar.xz.asc
+sha256  db0dee91561cbd957689036a3a71281efefd131d35d1d98ebbc32720e4da58e2  libarchive-3.8.2.tar.xz
 # Locally computed:
 sha256  30e556b3959e3985d66efefec5eaac51d4995053caa1d3cffe6eb916f146f229  COPYING
diff --git a/package/libarchive/libarchive.mk b/package/libarchive/libarchive.mk
index 1dafec726b..8568847493 100644
--- a/package/libarchive/libarchive.mk
+++ b/package/libarchive/libarchive.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBARCHIVE_VERSION = 3.8.1
+LIBARCHIVE_VERSION = 3.8.2
 LIBARCHIVE_SOURCE = libarchive-$(LIBARCHIVE_VERSION).tar.xz
 LIBARCHIVE_SITE = https://www.libarchive.de/downloads
 LIBARCHIVE_INSTALL_STAGING = YES


More information about the buildroot mailing list