libarchive 3.7.5
On September 14, a patch release 3.7.5 of the libarchive library was made, fixing many bugs and vulnerabilities. The library and accompanying utilities are written in C and distributed under the New BSD license. Vulnerability fixes: multiple vulnerabilities identified through Microsoft SAST; cpio: possible (fuzz test) overflow of signed 64-bit intermediate values gid/uid/size/ino when parsing AFIO archive files (a type of CPIO); lzop: preventing integer […]
