libarchive/libarchive-3.7.6.tar.xz.asc
Martin Pluskal 8971d00f6c - Update to 3.7.6:
* tar: clean up linkpath between entries
  * tar: fix memory leaks when processing symlinks or parsing pax headers
  * iso: be more cautious about parsing ISO-9660 timestamps
- Version 3.7.5 changes:
  * fix multiple vulnerabilities identified by SAST
  * cpio: ignore out-of-range gid/uid/size/ino and harden AFIO parsing
  * lzop: prevent integer overflow
  * rar4: protect copy_from_lzss_window_to_unp() (CVE-2024-20696, bsc#1225971)
  * rar4: fix CVE-2024-26256 (CVE-2024-26256, bsc#1225972)
  * rar4: fix OOB in delta and audio filter
  * rar4: fix out of boundary access with large files
  * rar4: add boundary checks to rgb filter
  * rar4: fix OOB access with unicode filenames
  * rar5: clear 'data ready' cache on window buffer reallocs
  * rpm: calculate huge header sizes correctly
  * unzip: unify EOF handling
  * util: fix out of boundary access in mktemp functions
  * uu: stop processing if lines are too long
  * 7zip: fix issue when skipping first file in 7zip archive that is a multiple
    of 65536 bytes
  * ar: fix archive entries having no type
  * lha: do not allow negative file sizes
  * lha: fix integer truncation on 32-bit systems
  * shar: check strdup return value
  * rar5: don't try to read rediculously long names
  * xar: fix another infinite loop and expat error handling
  * many Windows fixes, cleanups and improvements
- Drop fix-soversion.patch, fix-bsdunzip-test.patch
  * Fixed upstream

OBS-URL: https://build.opensuse.org/package/show/Archiving/libarchive?expand=0&rev=128
2024-10-02 08:17:45 +00:00

15 lines
659 B
Plaintext

-----BEGIN PGP SIGNATURE-----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=VN99
-----END PGP SIGNATURE-----