contrib: libarchive: update to 3.7.7
Security fixes: - gzip: prevent a hang when processing a malformed gzip inside a gzip (2366, OSS-Fuzz) - tar: don't crash on truncated tar archives (2364, OSS-Fuzz) - tar: fix two leaks in tar header parsing (2377) Important bugfixes: - 7-zip: read/write symlink paths as UTF-8 (2252) - cpio: exit with an error code if an entry could not be extracted (2371) - rar5: report encrypted entries (2096) - tar: fix truncation of entry pathnames in specific archives (2360) - windows: fix ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS (2363) (cherry picked from commit 784b7c59) (edited) edited: - 3.0 doesn't use GITHUB for the tarball - 3.0 had a patch for WinXP that has been merged
Showing
- contrib/src/libarchive/0001-Don-t-use-Windows-bcrypt-when-building-for-Windows-X.patch 0 additions, 78 deletions...on-t-use-Windows-bcrypt-when-building-for-Windows-X.patch
- contrib/src/libarchive/SHA512SUMS 1 addition, 1 deletioncontrib/src/libarchive/SHA512SUMS
- contrib/src/libarchive/rules.mak 1 addition, 2 deletionscontrib/src/libarchive/rules.mak
Loading
Please register or sign in to comment