Skip to content

[3.0] contrib: libarchive: update to 3.7.7

Steve Lhomme requested to merge robUx4/vlc:30-archive377 into 3.0.x

Security fixes:

  • gzip: prevent a hang when processing a malformed gzip inside a gzip (2366, OSS-Fuzz)
  • tar: don't crash on truncated tar archives (2364, OSS-Fuzz)
  • tar: fix two leaks in tar header parsing (2377)

Important bugfixes:

  • 7-zip: read/write symlink paths as UTF-8 (2252)
  • cpio: exit with an error code if an entry could not be extracted (2371)
  • rar5: report encrypted entries (2096)
  • tar: fix truncation of entry pathnames in specific archives (2360)
  • windows: fix ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS (2363)

(cherry picked from commit 784b7c59) (edited) edited:

  • 3.0 doesn't use GITHUB for the tarball
  • 3.0 had a patch for WinXP that has been merged

Merge request reports

Loading