Skip to content

Libarchive 3.7.7

Latest
Compare
Choose a tag to compare
@mmatuska mmatuska released this 13 Oct 08:28
· 96 commits to master since this release

Libarchive 3.7.7 is a bugfix and security release

Security fixes:

  • gzip: prevent a hang when processing a malformed gzip inside a gzip (#2366, OSS-Fuzz)
  • tar: don't crash on truncated tar archives (#2364, OSS-Fuzz)
  • tar: fix two leaks in tar header parsing (#2377)

Important bugfixes:

  • 7-zip: read/write symlink paths as UTF-8 (#2252)
  • cpio: exit with an error code if an entry could not be extracted (#2371)
  • rar5: report encrypted entries (#2096)
  • tar: fix truncation of entry pathnames in specific archives (#2360)
  • windows: fix ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS (#2363)

Full Changelog: v3.7.6...v3.7.7

Thanks to all contributors and bug reporters!