libxar1-1.8.0.0.503-1.2 RPM for armv7hl

From OpenSuSE Ports Tumbleweed for armv7hl

The XAR project aims to provide an easily extensible archive format. Important
design decisions include an easily extensible XML table of contents for random
access to archived files, storing the toc at the beginning of the archive to
allow for efficient handling of streamed archives, the ability to handle files
of arbitrarily large sizes, the ability to choose independent encodings for
individual files in the archive, the ability to store checksums for individual
files in both compressed and uncompressed form, and the ability to query the
table of content's rich meta-data.

Provides

• libxar1
• libxar.so.1
• libxar1(armv7hl-32)

Requires

• /sbin/ldconfig
• /sbin/ldconfig
• ld-linux-armhf.so.3
• ld-linux-armhf.so.3(GLIBC_2.4)
• libacl.so.1
• libacl.so.1(ACL_1.0)
• libbz2.so.1
• libc.so.6
• libc.so.6(GLIBC_2.33)
• libc.so.6(GLIBC_2.38)
• libc.so.6(GLIBC_2.4)
• libc.so.6(GLIBC_2.8)
• libcrypto.so.3
• libcrypto.so.3(OPENSSL_3.0.0)
• libgcc_s.so.1
• libgcc_s.so.1(GCC_3.5)
• libxml2.so.16
• libz.so.1
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1

License

BSD-3-Clause

Changelog

* Mon Jun 22 2026 Martin Pluskal <mpluskal@suse.com>
  - Switch to the maintained Apple xar lineage (build 503, versioned
    1.8.0.0.503): the mackyle 1.6.1 fork this package tracked has been
    dead since 2012, and Debian, Fedora and Gentoo all moved to Apple's
    xar (apple-oss-distributions/xar). This resolves the long-standing
    NULL-pointer dereferences in xar_get_path() and xar_unserialize()
    when parsing malformed archives:
    * CVE-2017-11124 (boo#1047875)
    * CVE-2017-11125 (boo#1047874)
    * CVE-2018-17093 (boo#1108595)
    * CVE-2018-17094 (boo#1108596)
  - Drop the obsolete mackyle-fork patches: ext2.patch,
    openssl-checks.patch, xar-fix-prototype.patch
  - Add the Gentoo-tracked Linux build patch set for the Apple lineage:
    xar-1.6.1-ext2.patch, xar-1.8-safe_dirname.patch,
    xar-1.8-arm-ppc.patch, xar-1.8-openssl-1.1.patch,
    xar-1.8.0.0.452-linux.patch, xar-1.8.0.0.487-non-darwin.patch,
    xar-1.8.0.0.487-variable-sized-object.patch,
    xar-1.8.0.0.498-impl-decls.patch
  - Add xar-1.8.0.0.503-linux-F_GETPATH.patch: resolve an fd's path via
    /proc/self/fd on Linux, where the macOS-only F_GETPATH fcntl used by
    the new xar_fdopen_digest_verify() is unavailable
* Tue Jun 02 2026 Martin Pluskal <mpluskal@suse.com>
  - Spec cleanup:
    * Add explicit gcc and make BuildRequires
    * Convert the library -devel BuildRequires to their pkgconfig()
      form (libacl, bzip2, libxml-2.0, zlib)
    * Drop obsolete Group tags
* Mon Dec 16 2024 Marcus Meissner <meissner@suse.com>
  - xar-fix-prototype.patch: fixed prototypes
* Mon Feb 26 2024 Dominique Leuenberger <dimstar@opensuse.org>
  - Use %patch -P N instead of deprecated %patchN.
* Thu Jun 08 2023 Martin Pluskal <mpluskal@suse.com>
  - Modernise spec file
  - Update project url
* Tue Mar 06 2018 crrodriguez@opensuse.org
  - fix build with openssl 1.1, just another broken configure test
    (openssl-checks.patch )
* Mon Dec 04 2017 mpluskal@suse.com
  - Explicitly BuildRequire libopenssl-1_0_0-devel until OpenSSL
    1.1.x support is ported
  - Clean up with spec-cleaner
* Mon Oct 03 2016 mpluskal@suse.com
  - Add ext2.patch from voidlinux
* Fri Jul 22 2016 jengelh@inai.de
  - Disable static build from the get-go if its files get removed
    anyway
* Fri Jul 22 2016 mpluskal@suse.com
  - Disable support for ext2 - gh#mackyle/xar#10

Files

/usr/lib/libxar.so.1
/usr/share/licenses/libxar1
/usr/share/licenses/libxar1/LICENSE

Generated by rpm2html 1.8.1

Fabrice Bellet, Sun Aug 2 04:22:40 2026