mirror of
https://github.com/opnsense/src.git
synced 2026-06-08 16:22:46 -04:00
4e9261006a
libarchive 3.8.1
New features:
#2088 7-zip reader: improve self-extracting archive detection
#2137 zip writer: added XZ, LZMA, ZSTD and BZIP2 support
#2403 zip writer: added LZMA + RISCV BCJ filter
#2601 bsdtar: support --mtime and --clamp-mtime
#2602 libarchive: mbedtls 3.x compatibility
Security fixes:
#2422 tar reader: Handle truncation in the middle of a GNU long linkname
(CVE-2024-57970)
#2532 tar reader: fix unchecked return value in list_item_verbose()
(CVE-2025-25724)
#2532 unzip: fix null pointer dereference (CVE-2025-1632)
#2568 warc: prevent signed integer overflow (CVE-2025-5916)
#2584 rar: do not skip past EOF while reading (CVE-2025-5918)
#2588 tar: fix overflow in build_ustar_entry (CVE-2025-5917)
#2598 rar: fix double free with over 4 billion nodes (CVE-2025-5914)
#2599 rar: fix heap-buffer-overflow (CVE-2025-5915)
Important bugfixes:
#2399 7-zip reader: add SPARC filter support for non-LZMA compressors
#2405 tar reader: ignore ustar size when pax size is present
#2435 tar writer: fix bug when -s/a/b/ used more than once with b flag
#2459 7-zip reader: add POWERPC filter support for non-LZMA compressors
#2519 libarchive: handle ARCHIVE_FILTER_LZOP in archive_read_append_filter
#2539 libarchive: add missing seeker function to archive_read_open_FILE()
#2544 gzip: allow setting the original filename for gzip compressed files
#2564 libarchive: improve lseek handling
#2582 rar: support large headers on 32 bit systems
#2587 bsdtar: don't hardlink negative inode files together
#2596 rar: support large headers on 32 bit systems
#2606 libarchive: support @-prefixed Unix epoch timestamps as date strings
#2634 tar: Support negative time values with pax
#2637 tar: Keep block alignment after pax error
#2642 libarchive: fix FILE_skip regression
#2643 tar: Handle extra bytes after sparse entries
#2649 compress: Prevent call stack overflow
#2651 iso9660: always check archive_string_ensure return value
CVE: CVE-2024-57970, CVE-2025-1632, CVE-2025-25724,
CVE-2025-5914, CVE-2025-5915, CVE-2025-5916,
CVE-2025-5917, CVE-2025-5918
PR: 286944 (exp-run, main, libarchive 3.8.0)
Approved by: so
Security: FreeBSD-SA-25:07.libarchive
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| test.h | ||
| test_0.c | ||
| test_basic.c | ||
| test_cmdline.c | ||
| test_extract.cpio.bz2.uu | ||
| test_extract.cpio.grz.uu | ||
| test_extract.cpio.gz.uu | ||
| test_extract.cpio.lrz.uu | ||
| test_extract.cpio.lz.uu | ||
| test_extract.cpio.lz4.uu | ||
| test_extract.cpio.lzma.uu | ||
| test_extract.cpio.lzo.uu | ||
| test_extract.cpio.xz.uu | ||
| test_extract.cpio.Z.uu | ||
| test_extract.cpio.zst.uu | ||
| test_extract_cpio_absolute_paths.c | ||
| test_extract_cpio_bz2.c | ||
| test_extract_cpio_grz.c | ||
| test_extract_cpio_gz.c | ||
| test_extract_cpio_lrz.c | ||
| test_extract_cpio_lz.c | ||
| test_extract_cpio_lz4.c | ||
| test_extract_cpio_lzma.c | ||
| test_extract_cpio_lzo.c | ||
| test_extract_cpio_xz.c | ||
| test_extract_cpio_Z.c | ||
| test_extract_cpio_zstd.c | ||
| test_format_newc.c | ||
| test_gcpio_compat.c | ||
| test_gcpio_compat_ref.bin.uu | ||
| test_gcpio_compat_ref.crc.uu | ||
| test_gcpio_compat_ref.newc.uu | ||
| test_gcpio_compat_ref.ustar.uu | ||
| test_gcpio_compat_ref_nosym.bin.uu | ||
| test_gcpio_compat_ref_nosym.crc.uu | ||
| test_gcpio_compat_ref_nosym.newc.uu | ||
| test_gcpio_compat_ref_nosym.ustar.uu | ||
| test_missing_file.c | ||
| test_option_0.c | ||
| test_option_a.c | ||
| test_option_b64encode.c | ||
| test_option_B_upper.c | ||
| test_option_c.c | ||
| test_option_C_upper.c | ||
| test_option_d.c | ||
| test_option_f.c | ||
| test_option_f.cpio.uu | ||
| test_option_grzip.c | ||
| test_option_help.c | ||
| test_option_J_upper.c | ||
| test_option_l.c | ||
| test_option_L_upper.c | ||
| test_option_lrzip.c | ||
| test_option_lz4.c | ||
| test_option_lzma.c | ||
| test_option_lzop.c | ||
| test_option_m.c | ||
| test_option_m.cpio.uu | ||
| test_option_passphrase.c | ||
| test_option_passphrase.zip.uu | ||
| test_option_t.c | ||
| test_option_t.cpio.uu | ||
| test_option_t.stdout.uu | ||
| test_option_tv.stdout.uu | ||
| test_option_u.c | ||
| test_option_uuencode.c | ||
| test_option_version.c | ||
| test_option_xz.c | ||
| test_option_y.c | ||
| test_option_z.c | ||
| test_option_Z_upper.c | ||
| test_option_zstd.c | ||
| test_owner_parse.c | ||
| test_passthrough_dotdot.c | ||
| test_passthrough_reverse.c | ||