Skip to content

Update dependency libarchive to v3.7.7#1721

Merged
renovate[bot] merged 1 commit intomainfrom
renovate/libarchive-3.x
Oct 13, 2024
Merged

Update dependency libarchive to v3.7.7#1721
renovate[bot] merged 1 commit intomainfrom
renovate/libarchive-3.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Oct 13, 2024

This PR contains the following updates:

Package Update Change
libarchive patch v3.7.6 -> v3.7.7

Release Notes

libarchive/libarchive (libarchive)

v3.7.7: Libarchive 3.7.7

Compare Source

Libarchive 3.7.7 is a bugfix and security release

Security fixes:

  • gzip: prevent a hang when processing a malformed gzip inside a gzip (#​2366, OSS-Fuzz)
  • tar: don't crash on truncated tar archives (#​2364, OSS-Fuzz)
  • tar: fix two leaks in tar header parsing (#​2377)

Important bugfixes:

  • 7-zip: read/write symlink paths as UTF-8 (#​2252)
  • cpio: exit with an error code if an entry could not be extracted (#​2371)
  • rar5: report encrypted entries (#​2096)
  • tar: fix truncation of entry pathnames in specific archives (#​2360)
  • windows: fix ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS (#​2363)

Full Changelog: libarchive/libarchive@v3.7.6...v3.7.7

Thanks to all contributors and bug reporters!


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot enabled auto-merge (rebase) October 13, 2024 10:33
@renovate renovate bot merged commit e930ebf into main Oct 13, 2024
@renovate renovate bot deleted the renovate/libarchive-3.x branch October 13, 2024 10:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants