Skip to content

Libarchive 3.8.0

Choose a tag to compare

View all tags
@mmatuska mmatuska released this 20 May 10:31
· 471 commits to patch/3.8 since this release
v3.8.0
This tag was signed with the committer’s verified signature. The key has expired.
mmatuska Martin Matuška
GPG key ID: 5848A18B8F14184B
Expired
Verified
Learn about vigilant mode.
70ff28f

Libarchive 3.8.0 is a feature and bugfix release.

New features:
bsdtar: support --mtime and --clamp-mtime (#2601)
lib: mbedtls 3.x compatibility (#2602)
7-zip reader: improve self-extracting archive detection (#2088)
xar: xmllite support for the XAR reader and writer (#2388)
zip writer: added XZ, LZMA, ZSTD and BZIP2 support (#2137, #2284, #2391)
zip writer: added LZMA + RISCV BCJ filter (#2403)

Notable security fixes:
rar: do not skip past EOF while reading (#2584 CVE-2025-5918)
rar: fix double free with over 4 billion nodes (#2598 CVE-2025-5914)
rar: fix heap-buffer-overflow (#2599 CVE-2025-5915)
warc: prevent signed integer overflow (#2568 CVE-2025-5916)
tar: fix overflow in build_ustar_entry (#2588 CVE-2025-5917)

Notable bugfixes:
bsdtar: don't hardlink negative inode files together (#2587)
gz: allow setting the original filename for gzip compressed files (#2544)
lib: improve lseek handling (#2564)
lib: support @-prefixed Unix epoch timestamps as date strings (#2606)
rar: support large headers on 32 bit systems (#2596)
tar reader: Improve LFS support on 32 bit systems (#2582)

Full Changelog: v3.7.9...v3.8.0

Thanks to all contributors and bug reporters!

Assets 8
Loading