- Update from version 3.7.7 to 3.7.9
- Update of rootfile
- 3 CVE fixes in 3.7.8
- Changelog
3.7.9
Important bugfixes:
a regression in libarchive 3.7.8 regarding GNU sparse entries was fixed
(#2558)
3.7.8
Security fixes:
tar reader: Handle truncation in the middle of a GNU long linkname (#2422,
CVE-2024-57970)
unzip: fix null pointer dereference (#2532, CVE-2025-1632)
tar reader: fix unchecked return value in list_item_verbose() (#2532,
CVE-2025-25724)
Important bugfixes:
7zip reader: add SPARC (#2399) and POWERPC (#2459) filter support for
non-LZMA compressors
tar reader: Ignore ustar size when pax size is present (#2405)
tar writer: Fix bug when -s/a/b/ used more than once with b flag (#2435)
cpio: Fix a Y2038 bug on Windows (#2471)
libarchive: Handle ARCHIVE_FILTER_LZOP in archive_read_append_filter (#2519)
libarchive: Adding missing seeker function to archive_read_open_FILE() (#2539)
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>