Packages / Fedora 44 / Unspecified / xar

Package: xar (1.8.0.417.1-17.fc44)

The eXtensible ARchiver

The XAR project aims to provide an easily extensible archive format. Important design decisions include an easily extensible XML table of contents for random access to archived files, storing the toc at the beginning of the archive to allow for efficient handling of streamed archives, the ability to handle files of arbitrarily large sizes, the ability to choose independent encodings for individual files in the archive, the ability to store checksums for individual files in both compressed and uncompressed form, and the ability to query the table of content's rich meta-data.

Other Packages Related to xar:

dep: ld-linux-aarch64.so.1()(64bit)
Package not available
dep: ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)
Package not available
dep: libbz2.so.1()(64bit)
Package not available
dep: libcrypto.so.3()(64bit)
Package not available
dep: libcrypto.so.3(OPENSSL_3.0.0)(64bit)
Package not available
dep: libxml2.so.2()(64bit)
Package not available
dep: libxml2.so.2(LIBXML2_2.4.30)(64bit)
Package not available
dep: libxml2.so.2(LIBXML2_2.5.0)(64bit)
Package not available
dep: libxml2.so.2(LIBXML2_2.6.0)(64bit)
Package not available
dep: libxml2.so.2(LIBXML2_2.6.5)(64bit)
Package not available
dep: libz.so.1()(64bit)
Package not available
dep: rtld(GNU_HASH)
Package not available
dep: libc.so.6(GLIBC_2.38)(64bit)
Package not available

Download xar

Architecture	Package size	Installed size	Files	Package
aarch64	67 KiB	212 KiB	list of files	Download
i686	74 KiB	154 KiB	list of files	Download
x86_64	71 KiB	156 KiB	list of files	Download

Package file paths (23)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/bin/xar
/usr/lib64/libxar.so.1
/usr/lib/.build-id
/usr/lib/.build-id/35
/usr/lib/.build-id/35/06318bffae48d383da3989253e59dfcda711a7
/usr/lib/.build-id/3b
/usr/lib/.build-id/3b/d9ddf66d7c298b1ffe4ce8afbd2997f6b39f32
/usr/lib/.build-id/75
/usr/lib/.build-id/75/948f02ee77980d606209c548027e2577424c97
/usr/lib/.build-id/77
/usr/lib/.build-id/77/f8baa525d02eda714c3d7c83fe5a76978bc7f8
/usr/lib/.build-id/82
/usr/lib/.build-id/82/a39d23eb6037ec7146ae60cc76339d37a43385
/usr/lib/.build-id/86
/usr/lib/.build-id/86/797143257456b5b1c5cb793e64bf22c857fadd
/usr/lib/libxar.so.1
/usr/share/doc/xar
/usr/share/doc/xar/ChangeLog
/usr/share/doc/xar/README
/usr/share/doc/xar/TODO
/usr/share/licenses/xar
/usr/share/licenses/xar/LICENSE
/usr/share/man/man1/xar.1.gz

Field source: Fedora 44 Everything aarch64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Fedora 44 in the browser Build an image that includes xar

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
1.8.0.417.1-17.fc44	44 / everything	aarch64	Fedora 44 · Everything · aarch64	67 KiB	212 KiB	Packages/x/xar-1.8.0.417.1-17.fc44.aarch64.rpm
1.8.0.417.1-17.fc44	44 / everything	i686	Fedora 44 · Everything · x86_64	74 KiB	154 KiB	Packages/x/xar-1.8.0.417.1-17.fc44.i686.rpm
1.8.0.417.1-17.fc44	44 / everything	x86_64	Fedora 44 · Everything · x86_64	71 KiB	156 KiB	Packages/x/xar-1.8.0.417.1-17.fc44.x86_64.rpm

Field source: Fedora 44 Everything aarch64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

Last synced: Oct 29, 2026, 7:21:39 PM UTC

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1.8.0.417.1-17.fc44 / aarch64Observed Sep 1, 2026sha256 8508a5d1efed…9bd30d31Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 8508a5d1efeda995d32b0d5f1e51a8e47e150a0de7d4de2907a207719bd30d31

Verify download

printf '%s  %s\n' '8508a5d1efeda995d32b0d5f1e51a8e47e150a0de7d4de2907a207719bd30d31' 'xar-1.8.0.417.1-17.fc44.aarch64.rpm' | sha256sum --check --strict -

Field source: Fedora 44 Everything aarch64

1.8.0.417.1-17.fc44 / i686Observed Sep 1, 2026sha256 c2313e9c526c…abf19899Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): c2313e9c526c2a7cfa588872d116b9874732ec2955fb3eb21e353a82abf19899

Verify download

printf '%s  %s\n' 'c2313e9c526c2a7cfa588872d116b9874732ec2955fb3eb21e353a82abf19899' 'xar-1.8.0.417.1-17.fc44.i686.rpm' | sha256sum --check --strict -

Field source: Fedora 44 Everything x86_64

1.8.0.417.1-17.fc44 / x86_64Observed Sep 1, 2026sha256 6c67f3bad7eb…f6bb54aeSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 6c67f3bad7eb10231dafb4f2dd14c43605883b518053a03080fae043f6bb54ae

Verify download

printf '%s  %s\n' '6c67f3bad7eb10231dafb4f2dd14c43605883b518053a03080fae043f6bb54ae' 'xar-1.8.0.417.1-17.fc44.x86_64.rpm' | sha256sum --check --strict -

Field source: Fedora 44 Everything x86_64

Sources

Fedora 44 Everything aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
44-everything-aarch64:ad124f8125666e9059d7a8180427bdaea80f6286f71140457e5c7edd95883eee
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-44&arch=aarch64
Signed-object SHA-256
236514c32119ab3c85b81fbb9e5e9d92b07aeba0d19d64c9b4fc9117a1863769
Keyring revision
RPM-GPG-KEY-fedora-44-primary
SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable
Fedora 44 Everything x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
44-everything-x86_64:da3845427d188097f6fd71b417a039bdfb8efefc4f38ca44b5cbb94f95a18991
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-44&arch=x86_64
Signed-object SHA-256
1300b99ac5d04b5561ad901320c8bd59ed1553f4971c3ce2ca48c40242c66676
Keyring revision
RPM-GPG-KEY-fedora-44-primary
SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable