libxar1-1.8.0.0.503-2.1 RPM for x86_64

From OpenSuSE Tumbleweed for x86_64

This package contains the shared library for creating, reading and
extracting XAR (Extensible Archive Format) archives.

Provides

• libxar1
• libxar.so.1()(64bit)
• libxar1(x86-64)

Requires

• /sbin/ldconfig
• /sbin/ldconfig
• libacl.so.1()(64bit)
• libacl.so.1(ACL_1.0)(64bit)
• libbz2.so.1()(64bit)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.14)(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.2)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.38)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_2.8)(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libxml2.so.16()(64bit)
• libz.so.1()(64bit)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1

License

BSD-3-Clause

Changelog

* Wed Oct 14 2026 Tomáš Chvátal <tomas.chvatal@gmail.com>
  - Add a %check section: a smoke test that round-trips an archive
    with the just-built binary (create, list, extract, byte-compare)
    for the default and bzip2 encodings
  - Give libxar1 and libxar-devel their own summaries and
    descriptions instead of repeating the main package text, and fix
    the "Extensive" typo in the library summary
* Mon Jun 22 2026 Martin Pluskal <mpluskal@suse.com>
  - Switch to the maintained Apple xar lineage (build 503, versioned
    1.8.0.0.503): the mackyle 1.6.1 fork this package tracked has been
    dead since 2012, and Debian, Fedora and Gentoo all moved to Apple's
    xar (apple-oss-distributions/xar). This resolves the long-standing
    NULL-pointer dereferences in xar_get_path() and xar_unserialize()
    when parsing malformed archives:
    * CVE-2017-11124 (boo#1047875)
    * CVE-2017-11125 (boo#1047874)
    * CVE-2018-17093 (boo#1108595)
    * CVE-2018-17094 (boo#1108596)
  - Drop the obsolete mackyle-fork patches: ext2.patch,
    openssl-checks.patch, xar-fix-prototype.patch
  - Add the Gentoo-tracked Linux build patch set for the Apple lineage:
    xar-1.6.1-ext2.patch, xar-1.8-safe_dirname.patch,
    xar-1.8-arm-ppc.patch, xar-1.8-openssl-1.1.patch,
    xar-1.8.0.0.452-linux.patch, xar-1.8.0.0.487-non-darwin.patch,
    xar-1.8.0.0.487-variable-sized-object.patch,
    xar-1.8.0.0.498-impl-decls.patch
  - Add xar-1.8.0.0.503-linux-F_GETPATH.patch: resolve an fd's path via
    /proc/self/fd on Linux, where the macOS-only F_GETPATH fcntl used by
    the new xar_fdopen_digest_verify() is unavailable
* Tue Jun 02 2026 Martin Pluskal <mpluskal@suse.com>
  - Spec cleanup:
    * Add explicit gcc and make BuildRequires
    * Convert the library -devel BuildRequires to their pkgconfig()
      form (libacl, bzip2, libxml-2.0, zlib)
    * Drop obsolete Group tags
* Mon Dec 16 2024 Marcus Meissner <meissner@suse.com>
  - xar-fix-prototype.patch: fixed prototypes
* Mon Feb 26 2024 Dominique Leuenberger <dimstar@opensuse.org>
  - Use %patch -P N instead of deprecated %patchN.
* Thu Jun 08 2023 Martin Pluskal <mpluskal@suse.com>
  - Modernise spec file
  - Update project url
* Tue Mar 06 2018 crrodriguez@opensuse.org
  - fix build with openssl 1.1, just another broken configure test
    (openssl-checks.patch )
* Mon Dec 04 2017 mpluskal@suse.com
  - Explicitly BuildRequire libopenssl-1_0_0-devel until OpenSSL
    1.1.x support is ported
  - Clean up with spec-cleaner
* Mon Oct 03 2016 mpluskal@suse.com
  - Add ext2.patch from voidlinux
* Fri Jul 22 2016 jengelh@inai.de
  - Disable static build from the get-go if its files get removed
    anyway

Files

/usr/lib64/libxar.so.1
/usr/share/licenses/libxar1
/usr/share/licenses/libxar1/LICENSE

Generated by rpm2html 1.8.1

Fabrice Bellet, Thu Oct 22 00:39:11 2026