Files
Martin Matuska fb780a82df libarchive: merge from vendor branch
libarchive 3.8.1

New features:
 #2088 7-zip reader: improve self-extracting archive detection
 #2137 zip writer: added XZ, LZMA, ZSTD and BZIP2 support
 #2403 zip writer: added LZMA + RISCV BCJ filter
 #2601 bsdtar: support --mtime and --clamp-mtime
 #2602 libarchive: mbedtls 3.x compatibility

Security fixes:
 #2422 tar reader: Handle truncation in the middle of a GNU long linkname
       (CVE-2024-57970)
 #2532 tar reader: fix unchecked return value in list_item_verbose()
       (CVE-2025-25724)
 #2532 unzip: fix null pointer dereference (CVE-2025-1632)
 #2568 warc: prevent signed integer overflow (CVE-2025-5916)
 #2584 rar: do not skip past EOF while reading (CVE-2025-5918)
 #2588 tar: fix overflow in build_ustar_entry (CVE-2025-5917)
 #2598 rar: fix double free with over 4 billion nodes (CVE-2025-5914)
 #2599 rar: fix heap-buffer-overflow (CVE-2025-5915)

Important bugfixes:
 #2399 7-zip reader: add SPARC filter support for non-LZMA compressors
 #2405 tar reader: ignore ustar size when pax size is present
 #2435 tar writer: fix bug when -s/a/b/ used more than once with b flag
 #2459 7-zip reader: add POWERPC filter support for non-LZMA compressors
 #2519 libarchive: handle ARCHIVE_FILTER_LZOP in archive_read_append_filter
 #2539 libarchive: add missing seeker function to archive_read_open_FILE()
 #2544 gzip: allow setting the original filename for gzip compressed files
 #2564 libarchive: improve lseek handling
 #2582 rar: support large headers on 32 bit systems
 #2587 bsdtar: don't hardlink negative inode files together
 #2596 rar: support large headers on 32 bit systems
 #2606 libarchive: support @-prefixed Unix epoch timestamps as date strings
 #2634 tar: Support negative time values with pax
 #2637 tar: Keep block alignment after pax error
 #2642 libarchive: fix FILE_skip regression
 #2643 tar: Handle extra bytes after sparse entries
 #2649 compress: Prevent call stack overflow
 #2651 iso9660: always check archive_string_ensure return value

CVE:		CVE-2024-57970, CVE-2025-1632, CVE-2025-25724,
		CVE-2025-5914, CVE-2025-5915, CVE-2025-5916,
		CVE-2025-5917, CVE-2025-5918
PR:		286944 (exp-run, main, libarchive 3.8.0)
Approved by:	so
Security:	FreeBSD-SA-25:07.libarchive

(cherry picked from commit 2e113ef824)
(cherry picked from commit 6dad4525a2)
2025-08-07 16:57:20 -07:00
..
2024-12-09 13:39:21 +01:00
2024-10-21 11:56:18 +08:00
2025-04-06 02:28:14 +02:00
2023-08-16 11:55:20 -06:00
2025-02-19 21:34:42 -05:00
2024-12-09 13:39:21 +01:00
2024-10-27 09:45:34 +01:00
2024-08-01 18:15:57 +02:00
2023-08-16 11:55:26 -06:00
2024-12-09 13:39:21 +01:00
2025-03-23 21:40:28 -04:00
2024-10-21 11:55:41 +08:00
2023-08-16 11:55:03 -06:00
2025-01-29 18:33:13 +00:00
2024-10-17 15:48:37 +00:00
2025-02-19 21:34:42 -05:00
2025-02-19 21:34:42 -05:00
2024-12-21 23:46:59 -08:00
2024-07-21 20:55:27 -04:00
2023-08-17 15:08:30 +02:00
2025-05-08 09:24:51 -07:00
2024-01-19 09:25:05 -05:00
2025-05-21 19:36:41 +02:00
2024-10-25 13:30:26 +02:00
2024-10-21 11:54:44 +08:00
2024-10-21 11:53:44 +08:00
2023-08-16 11:55:03 -06:00
2025-02-19 21:34:42 -05:00
2025-01-29 10:51:31 +01:00
2023-08-16 11:55:03 -06:00
2024-02-24 13:12:49 +01:00
2024-01-21 17:08:48 +01:00
2024-08-01 18:15:57 +02:00
2025-08-07 16:57:20 -07:00
2024-12-28 11:17:27 -07:00
2025-05-27 22:20:01 -04:00
2024-06-04 13:36:23 +02:00
2025-01-15 10:55:01 +01:00
2023-08-16 11:55:03 -06:00
2022-11-04 22:46:55 -05:00
2023-08-16 11:55:03 -06:00
2025-05-08 09:24:51 -07:00
2025-05-08 09:24:51 -07:00