File mingw64-libarchive.changes of Package mingw64-libarchive

-------------------------------------------------------------------
Tue Nov 18 12:52:38 UTC 2025 - Martin Hauke <mardnh@gmx.de>

- Update to version 3.8.3
  Security fixes:
  * lib: Create temporary files in the target directory.
  * lha: Fix for an out-of-bounds buffer overrun when using
    p[H_LEVEL_OFFSET].
  * 7-zip: Fix a buffer overrun when reading truncated 7zip
    headers (#2769).
  Notable bugxies:
  * lz4 and zstd: Support both lz4 and zstd data with leading
    skippable frames (#2771).

-------------------------------------------------------------------
Thu Oct 16 04:43:32 UTC 2025 - Martin Hauke <mardnh@gmx.de>

- Update to version 3.8.2
  Security fixes:
  * 7zip: Fix out of boundary access (#2668).
  * tar reader: fix checking the result of the strftime (#2719,
    CVE-2025-25724)

-------------------------------------------------------------------
Sun Sep 28 16:30:33 UTC 2025 - Ralf Habacker <ralf.habacker@freenet.de>

- Fixes unresolved dependency for mingw64-libgxps by
  avoiding runtime dependency on the xmllite.dll library
  provided by the Windows API.

-------------------------------------------------------------------
Mon Jun  2 06:45:10 UTC 2025 - Martin Hauke <mardnh@gmx.de>

- Update to version 3.8.1
  * Notable bugfixes:
  * libarchive: fix FILE_skip regression (#2642)
  * compress: Prevent call stack overflow (#2649)
  * iso9660: always check archive_string_ensure return value (#2651)
  * tar: Support negative time values with pax (#2634)
  * tar: Keep block alignment after pax error (#2637)
  * tar: Handle extra bytes after sparse entries (#2643)
  * windows: check archive_wstring_ensure return value (#2652)

-------------------------------------------------------------------
Wed May 21 14:12:18 UTC 2025 - Martin Hauke <mardnh@gmx.de>

- Update to version 3.8.0

-------------------------------------------------------------------
Tue Apr 15 17:31:37 UTC 2025 - Martin Hauke <mardnh@gmx.de>

- Update to version 3.7.9

-------------------------------------------------------------------
Tue Apr  1 11:06:20 UTC 2025 - Martin Hauke <mardnh@gmx.de>

- Update to version 3.7.8
  * tar reader: Ignore ustar size when pax size is present.
  * tar writer: Fix bug when -s/a/b/ used more than once with
    b flag.
  * libarchive: Handle ARCHIVE_FILTER_LZOP in
    archive_read_append_filter
  * libarchive: Adding missing seeker function to
    archive_read_open_FILE()
- Inludes the previously patched security fixes, dropping:
  * CVE-2025-1632.patch
  * CVE-2025-25724.patch
  * CVE-2024-57970.patch

-------------------------------------------------------------------
Sun Mar 23 09:10:40 UTC 2025 - Martin Hauke <mardnh@gmx.de>

- Update to version 3.7.7