| 1.1.1.1 |
| 30-Jan-2026 |
christos | Import libarchive-3.8.3 (previous was 3.7.7)
Libarchive 3.8.5 is a bugfix release.
Notable bugxies:
bsdtar: fix regression from 3.8.4 zero-length pattern issue bugfix (#2809) various small bugfixes in code and documentation
Libarchive 3.8.4 is a bugfix release.
Notable bugxies:
bsdtar: Fix zero-length pattern issue (#2787) lib: Fix regression introduced in libarchive 3.8.2 when walking enterable but unreadable directories (#2797)
Libarchive 3.8.3 is a bugfix and security release.
Security fixes:
lib: Create temporary files in the target directory (#2753) lha: Fix for an out-of-bounds buffer overrun when using p[H_LEVEL_OFFSET] (#2768) 7-zip: Fix a buffer overrun when reading truncated 7zip headers (#2769)
Notable bugxies:
lz4 and zstd: Support both lz4 and zstd data with leading skippable frames (#2771)
Libarchive 3.8.2 is a bugfix and security release.
Security fixes:
7zip: Fix out of boundary access (#2668) tar reader: fix checking the result of the strftime (#2719, CVE-2025-25724)
Notable bugfixes:
bsdtar: Allow filename to have CRLF endings (#2717) lib: archive_read_data: handle sparse holes at end of file correctly (#2665) lib: improve filter process handling (#2659) lib: fix error checking in writing files (#2672) lib: handle possible errors from system calls (#2679) lib: avoid leaking file descriptors into subprocesses (#2707) lib: parse_date: handle dates in 2038 and beyond if time_t is big enough (#2742) RAR5 reader: fix multiple issues in extra field parsing function (#2713) RAR5 reader: early fail when file declares data for a dir entry (#2716) tar writer: fix replacing a regular file with a dir for ARCHIVE_EXTRACT_SAFE_WRITES (#2477) tar reader (Windows): check WCS pathname in header_gnutar before overwriting (#2740) tar reader: fix an infinite loop when parsing V headers (#2737) zip writer: fix a memory leak if write callback error early (#2664) zip writer: fix writing with ZSTD compression (#2670) zstd write filter: enable Zstandard's checksum feature (#2678)
Libarchive 3.8.1 is a bugfix release.
Notable bugfixes: libarchive: fix FILE_skip regression (#2642) compress: Prevent call stack overflow (#2649) iso9660: always check archive_string_ensure return value (#2651) tar: Support negative time values with pax (#2634) tar: Reset accumulated header state after reading macOS metadata blob (#2636) tar: Keep block alignment after pax error (#2637) tar: Handle extra bytes after sparse entries (#2643) windows: check archive_wstring_ensure return value (#2652)
Libarchive 3.8.0 is a feature and bugfix release.
New features: bsdtar: support --mtime and --clamp-mtime (#2601) lib: mbedtls 3.x compatibility (#2602) 7-zip reader: improve self-extracting archive detection (#2088) xar: xmllite support for the XAR reader and writer (#2388) zip writer: added XZ, LZMA, ZSTD and BZIP2 support (#2137, #2284, #2391) zip writer: added LZMA + RISCV BCJ filter (#2403)
Notable security fixes: rar: do not skip past EOF while reading (#2584 CVE-2025-5918) rar: fix double free with over 4 billion nodes (#2598 CVE-2025-5914) rar: fix heap-buffer-overflow (#2599 CVE-2025-5915) warc: prevent signed integer overflow (#2568 CVE-2025-5916) tar: fix overflow in build_ustar_entry (#2588 CVE-2025-5917)
Notable bugfixes: bsdtar: don't hardlink negative inode files together (#2587) gz: allow setting the original filename for gzip compressed files (#2544) lib: improve lseek handling (#2564) lib: support @-prefixed Unix epoch timestamps as date strings (#2606) rar: support large headers on 32 bit systems (#2596) tar reader: Improve LFS support on 32 bit systems (#2582)
Libarchive 3.7.9 is a bugfix release
Important bugfixes:
a regression in libarchive 3.7.8 regarding GNU sparse entries was fixed (#2558)
Libarchive 3.7.8 is a bugfix and security release
Security fixes:
tar reader: Handle truncation in the middle of a GNU long linkname (#2422, CVE-2024-57970) unzip: fix null pointer dereference (#2532, CVE-2025-1632) tar reader: fix unchecked return value in list_item_verbose() (#2532, CVE-2025-25724)
Important bugfixes:
7zip reader: add SPARC (#2399) and POWERPC (#2459) filter support for non-LZMA compressors tar reader: Ignore ustar size when pax size is present (#2405) tar writer: Fix bug when -s/a/b/ used more than once with b flag (#2435) cpio: Fix a Y2038 bug on Windows (#2471) libarchive: Handle ARCHIVE_FILTER_LZOP in archive_read_append_filter (#2519) libarchive: Adding missing seeker function to archive_read_open_FILE() (#2539)
|