libarchive (3.6.0-1ubuntu1.8) jammy-security; urgency=medium

  * SECURITY UPDATE: Double free in init_unpack.
    - debian/patches/CVE-2026-14164.patch: Avoid dangling pointers in
      libarchive/archive_read_support_format_rar5.c
    - CVE-2026-14164
  * SECURITY UPDATE: NULL pointer dereference in archive_acl_from_text_nl.
    - debian/patches/CVE-2026-5745.patch: Fix NULL pointer dereference in
      libarchive/archive_acl.c
    - CVE-2026-5745

 -- Kyle Kernick <kyle.kernick@canonical.com>  Mon, 20 Jul 2026 13:49:30 -0600

libarchive (3.6.0-1ubuntu1.7) jammy-security; urgency=medium

  * SECURITY UPDATE: Heap out-of-bounds read during RAR archive processing
    - debian/patches/CVE-2026-4424-1.patch: Reallocate undersized LZSS windows
      in libarchive/archive_read_support_format_rar.c
    - debian/patches/CVE-2026-4424-2.patch: Cast LZSS mask comparison in
      libarchive/archive_read_support_format_rar.c
    - CVE-2026-4424
  * SECURITY UPDATE: Undefined behavior during zisofs decompression
    - debian/patches/CVE-2026-4426.patch: Validate zisofs block size exponent
      in libarchive/archive_read_support_format_iso9660.c
    - CVE-2026-4426
  * SECURITY UPDATE: Integer overflow during zisofs block pointer allocation
    - debian/patches/CVE-2026-5121.patch: Add related regression tests in
      test/test_read_format_iso_zisofs_overflow.c and
      ../test_read_format_iso_zisofs_overflow.iso.uu
    - CVE-2026-5121

 -- Shafayat Hossain Majumder <shafayat.majumder@canonical.com>  Tue, 20 May 2026 11:53:03 -0400

libarchive (3.6.0-1ubuntu1.6) jammy-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds read during streamed archive skipping
    - debian/patches/CVE-2025-5918-1.patch: Prevent EOF-skipping in
      libarchive/archive_read_open_fd.c, libarchive/archive_read_open_file.c,
      libarchive/archive_read_open_filename.c, add relevant tests in
      libarchive/test/test_read_format_rar.c
    - debian/patches/CVE-2025-5918-2.patch: Fix file skip offset handling in
      libarchive/archive_read_open_file.c
    - CVE-2025-5918
  * SECURITY UPDATE: Unbounded memory allocation during bsdtar substitution
    processing
    - debian/patches/CVE-2025-60753.patch: Advance zero-length matches in
      tar/subst.c and add tests in tar/test/test_option_s.c
    - CVE-2025-60753
  * SECURITY UPDATE: Infinite loop during RAR5 decompression
    - debian/patches/CVE-2026-4111.patch: Filter bounds in
      libarchive/archive_read_support_format_rar5.c and add loop regression
      tests in libarchive/test/test_read_format_rar5_loop_bug.c,
      libarchive/test/test_read_format_rar5_loop_bug.rar.uu
    - CVE-2026-4111

 -- Shafayat Hossain Majumder <shafayat.majumder@canonical.com>  Wed, 01 Apr 2026 14:22:14 -0400

libarchive (3.6.0-1ubuntu1.5) jammy-security; urgency=medium

  * SECURITY UPDATE: double free issue                                     
    - debian/patches/CVE-2025-5914.patch: rar: Fix double free with over   
      4 billion nodes                                                      
    - CVE-2025-5914                                                        
  * SECURITY UPDATE: heap-based buffer overflow                            
    - debian/patches/CVE-2025-5915.patch: rar: Fix heap-buffer-overflow    
    - CVE-2025-5915                                                        
  * SECURITY UPDATE: integer overflow                                      
    - debian/patches/CVE-2025-5916.patch: warc: Prevent signed integer     
      overflow                                                             
    - CVE-2025-5916                                                        
  * SECURITY UPDATE: out-of-bound write overflow                           
    - debian/patches/CVE-2025-5917.patch: Fix overflow in build_ustar_entry
    - CVE-2025-5917

 -- Nishit Majithia <nishit.majithia@canonical.com>  Wed, 25 Jun 2025 15:21:03 +0530

libarchive (3.6.0-1ubuntu1.4) jammy-security; urgency=medium

  * SECURITY UPDATE: DoS via crafted TAR archive
    - debian/patches/CVE-2025-25724.patch: make sure ltime is valid in
      tar/util.c.
    - CVE-2025-25724

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 10 Apr 2025 13:35:36 -0400

libarchive (3.6.0-1ubuntu1.3) jammy-security; urgency=medium

  * SECURITY UPDATE: code execution via negative copy length
    - debian/patches/CVE-2024-20696.patch: protect
      copy_from_lzss_window_to_unp() in
      libarchive/archive_read_support_format_rar.c.
    - CVE-2024-20696

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 29 Oct 2024 10:03:06 +0100

libarchive (3.6.0-1ubuntu1.2) jammy-security; urgency=medium

  * SECURITY UPDATE: NULL pointer dereference
    - debian/patches/CVE-2022-36227.patch: Add NULL check in archive_write
      functions
    - CVE-2022-36227
  * SECURITY UPDATE: Out of bounds access
    - debian/patches/CVE-2024-48957.patch: check dst isn't less than or
      equal to src in execute_filter_audio
    - CVE-2024-48957
  * SECURITY UPDATE: Out of bounds access
    - debian/patches/CVE-2024-48958.patch: check dst isn't less than or
      equal to src in execute_filter_delta
    - CVE-2024-48958

 -- Bruce Cable <bruce.cable@canonical.com>  Mon, 14 Oct 2024 12:03:12 +1100

libarchive (3.6.0-1ubuntu1.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Remove code execution
    - debian/patches/CVE-2024-26256.patch: fix OOB in rar e8 filter
      in libarchive/archive_read_support_format_rar.c.
    - CVE-2024-26256

 -- Leonidas Da Silva Barbosa <leo.barbosa@canonical.com>  Thu, 30 May 2024 16:05:48 -0300

libarchive (3.6.0-1ubuntu1) jammy; urgency=medium

  * Sync with Debian. (LP: #1967127)
    - Includes upstream fixes for CVE-2021-36976
  * debian/rules: fix broken check for nocheck DEB_BUILD_OPTION
  * SECURITY UPDATE: possible out-of-bounds read
    - Cherry-pick CVE-2022-26280.patch to fix zipx_lzma_alone_init()
    - CVE-2022-26280

 -- Jeremy Bicha <jbicha@ubuntu.com>  Wed, 06 Apr 2022 16:33:16 -0400

libarchive (3.6.0-1) unstable; urgency=medium

  * New upstream version (Closes: #1007120):
    - update the upstream copyright information
    - drop some patches that were taken from the upstream source:
      - lzip-large-dict
      - upstream-fix-32bit-size-cast
      - upstream-fixup-file-flags
      - upstream-fixup-symlinks
    - add another spelling correction to the typos patch
    - update the line numbers in the typos patch
  * Add the year 2022 to my debian/* copyright notice.
  * Reorder the copyright file so that it makes sense.

 -- Peter Pentchev <roam@debian.org>  Wed, 30 Mar 2022 13:04:33 +0300

# For older changelog entries, run 'apt-get changelog libarchive13'
