Opened 7 months ago

Closed 7 months ago

#22932 closed enhancement (fixed)

libarchive-3.8.6

Reported by: Bruce Dubbs Owned by: pierre
Priority: normal Milestone: 13.1
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New point version.

Change History (4)

comment:1 by pierre, 7 months ago

Owner: changed from blfs-book to pierre
Status: new → assigned

comment:2 by pierre, 7 months ago

Libarchive 3.8.6

Libarchive 3.8.6 is a security and bugfix release.

Notable fixes:

  • libarchive: fix incompatibility with Nettle 4.x (#2858)
  • libarchive: fix NULL pointer dereference in archive_acl_from_text_w() (#2859)
  • bsdunzip: fix ISO week year and Gregorian year confusion (#2860)
  • 7zip: ix SEGV in check_7zip_header_in_sfx via ELF offset validation (#2864)
  • 7zip: fix out-of-bounds access on ELF 64-bit header (#2875)
  • RAR5 reader: fix infinite loop in rar5 decompression (#2877)
  • RAR5 reader: fix potential memory leak (#2892)
  • RAR5: fix SIGSEGV when archive_read_support_format_rar5 is called twice (#2893)
  • CAB reader: fix memory leak on repeated calls to archive_read_support_format_cab (#2895)
  • mtree reader: Fix file descriptor leak in mtree parser cleanup (CWE-775, #2878)
  • various small bugfixes in code and documentation

comment:3 by pierre, 7 months ago

It's said that nettle-4 support has been fixed, but nothing has been done more than #2858. Let me try...

comment:4 by pierre, 7 months ago

Resolution: → fixed
Status: assigned → closed

Nettle-4 support is still broken, because one file used in configure tests has not been updated.

Fixed at 92b608e0da

Note: See TracTickets for help on using tickets.