Skip to content

contrib: libarchive: update to 3.7.7

Steve Lhomme requested to merge robUx4/vlc:libarchive-377 into master

Security fixes:

  • gzip: prevent a hang when processing a malformed gzip inside a gzip (2366, OSS-Fuzz)
  • tar: don't crash on truncated tar archives (2364, OSS-Fuzz)
  • tar: fix two leaks in tar header parsing (2377)

Important bugfixes:

  • 7-zip: read/write symlink paths as UTF-8 (2252)
  • cpio: exit with an error code if an entry could not be extracted (2371)
  • rar5: report encrypted entries (2096)
  • tar: fix truncation of entry pathnames in specific archives (2360)
  • windows: fix ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS (2363)
Edited by Steve Lhomme

Merge request reports

Loading