[ubuntu/resolute-proposed] libarchive 3.8.5-1ubuntu2 (Accepted)

[Shafayat Hossain Majumder]

libarchive (3.8.5-1ubuntu2) resolute; urgency=medium

  * SECURITY UPDATE: Infinite loop during RAR5 decompression
    - debian/patches/CVE-2026-4111.patch: Filter bounds in
      libarchive/archive_read_support_format_rar5.c and add loop regression
      tests in libarchive/test/test_read_format_rar5_loop_bug.c,
      libarchive/test/test_read_format_rar5_loop_bug.rar.uu
    - CVE-2026-4111

Date: Wed, 01 Apr 2026 14:23:44 -0400
Changed-By: Shafayat Hossain Majumder <shafayat.majumder at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/libarchive/3.8.5-1ubuntu2
-------------- next part --------------
Format: 1.8
Date: Wed, 01 Apr 2026 14:23:44 -0400
Source: libarchive
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 3.8.5-1ubuntu2
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Shafayat Hossain Majumder <shafayat.majumder at canonical.com>
Changes:
 libarchive (3.8.5-1ubuntu2) resolute; urgency=medium
 .
   * SECURITY UPDATE: Infinite loop during RAR5 decompression
     - debian/patches/CVE-2026-4111.patch: Filter bounds in
       libarchive/archive_read_support_format_rar5.c and add loop regression
       tests in libarchive/test/test_read_format_rar5_loop_bug.c,
       libarchive/test/test_read_format_rar5_loop_bug.rar.uu
     - CVE-2026-4111
Checksums-Sha1:
 89e7c773ac4fa0d91b606f7cf7c4dfdc40ee60f4 2804 libarchive_3.8.5-1ubuntu2.dsc
 035d76581c0d9363278a0af6c19e4014e1affaa2 27112 libarchive_3.8.5-1ubuntu2.debian.tar.xz
 e8d8ea487459d2e39e57889423f58760af1e25f8 7011 libarchive_3.8.5-1ubuntu2_source.buildinfo
Checksums-Sha256:
 c577ec99678f8142f17b129a0a34f46969f92a53bd1406962c320c681e0aa3d4 2804 libarchive_3.8.5-1ubuntu2.dsc
 01668c10b9eeafb92ca319a572a15aced15645ce8af29131eb9c1efb2b078998 27112 libarchive_3.8.5-1ubuntu2.debian.tar.xz
 9d69a0ea58779c32848ac0678f7ac7181c30ba3b3362a5bf8413845c505bffd9 7011 libarchive_3.8.5-1ubuntu2_source.buildinfo
Files:
 615d5f7cd21cf269033e0966597b94c8 2804 libs optional libarchive_3.8.5-1ubuntu2.dsc
 96a78b65c1d6c7d056e3eff0cb455aab 27112 libs optional libarchive_3.8.5-1ubuntu2.debian.tar.xz
 05f4292d4643de0f22ec1e3d638f61b9 7011 libs optional libarchive_3.8.5-1ubuntu2_source.buildinfo
Original-Maintainer: Gabriel Barrantes <gabriel.barrantes.dev at outlook.com>