[vlc-commits] [Git][videolan/vlc][master] contrib: libarchive: update to 3.7.7

Steve Lhomme (@robUx4) gitlab at videolan.org
Thu Oct 17 07:50:33 UTC 2024



Steve Lhomme pushed to branch master at VideoLAN / VLC


Commits:
784b7c59 by Steve Lhomme at 2024-10-17T07:11:40+00:00
contrib: libarchive: update to 3.7.7

Security fixes:

- gzip: prevent a hang when processing a malformed gzip inside a gzip (2366, OSS-Fuzz)
- tar: don't crash on truncated tar archives (2364, OSS-Fuzz)
- tar: fix two leaks in tar header parsing (2377)

Important bugfixes:

- 7-zip: read/write symlink paths as UTF-8 (2252)
- cpio: exit with an error code if an entry could not be extracted (2371)
- rar5: report encrypted entries (2096)
- tar: fix truncation of entry pathnames in specific archives (2360)
- windows: fix ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS (2363)

- - - - -


2 changed files:

- contrib/src/libarchive/SHA512SUMS
- contrib/src/libarchive/rules.mak


Changes:

=====================================
contrib/src/libarchive/SHA512SUMS
=====================================
@@ -1 +1 @@
-d55483de313e00b3855ea535dfeeb78dcfdaa48ae6d17589dbb419ead2eb5818e7a8617b73b93c810402a9ece65b416e2d73b09efbc39c02916d80b180f4200b  libarchive-3.7.6.tar.gz
+cce6eecfcd33d228bd1b1162a90bad63750adb53ac4edcaed34e2fdc30b6ba211cf1fd25d4b8761373949ceec266478b09bd70ffa4e374803a29e8573d6d149e  libarchive-3.7.7.tar.gz


=====================================
contrib/src/libarchive/rules.mak
=====================================
@@ -1,5 +1,5 @@
 # LIBARCHIVE
-LIBARCHIVE_VERSION := 3.7.6
+LIBARCHIVE_VERSION := 3.7.7
 LIBARCHIVE_URL := $(GITHUB)/libarchive/libarchive/releases/download/v$(LIBARCHIVE_VERSION)/libarchive-$(LIBARCHIVE_VERSION).tar.gz
 
 PKGS += libarchive



View it on GitLab: https://code.videolan.org/videolan/vlc/-/commit/784b7c5978efc8df13732b8d3f9a2b45c809344e

-- 
View it on GitLab: https://code.videolan.org/videolan/vlc/-/commit/784b7c5978efc8df13732b8d3f9a2b45c809344e
You're receiving this email because of your account on code.videolan.org.


VideoLAN code repository instance


More information about the vlc-commits mailing list