libarchive-3.8.2

[Bruce Dubbs]

New point version.

[Douglas R. Reno]

This release has two security fixes in it

[Douglas R. Reno]

Libarchive 3.8.2 is a bugfix and security release.

Security fixes:

    7zip: Fix out of boundary access (#2668)
    tar reader: fix checking the result of the strftime (#2719, CVE-2025-25724)

Notable bugfixes:

    bsdtar: Allow filename to have CRLF endings (#2717)
    lib: archive_read_data: handle sparse holes at end of file correctly (#2665)
    lib: improve filter process handling (#2659)
    lib: fix error checking in writing files (#2672)
    lib: handle possible errors from system calls (#2679)
    lib: avoid leaking file descriptors into subprocesses (#2707)
    lib: parse_date: handle dates in 2038 and beyond if time_t is big enough (#2742)
    RAR5 reader: fix multiple issues in extra field parsing function (#2713)
    RAR5 reader: early fail when file declares data for a dir entry (#2716)
    tar writer: fix replacing a regular file with a dir for ARCHIVE_EXTRACT_SAFE_WRITES (#2477)
    tar reader (Windows): check WCS pathname in header_gnutar before overwriting (#2740)
    tar reader: fix an infinite loop when parsing V headers (#2737)
    zip writer: fix a memory leak if write callback error early (#2664)
    zip writer: fix writing with ZSTD compression (#2670)
    zstd write filter: enable Zstandard's checksum feature (#2678)

[Douglas R. Reno]

Fixed at 7714d6ca8d9301ec6950c915957961e0866bee9a

SA-12.4-024 issued

[Bruce Dubbs]

Milestone renamed