Libarchive 3.5.1

Libarchive 3.5.1 is a bugfix release.

Bugfixes:

• various compilation fixes (#1461, #1462, #1463, #1464)
• fixed undefined behavior in a function in warc reader (#1465)
• Windows binary uses xz 5.2.5

Thanks to all contributors and bug reporters.

Libarchive 3.5.0

Libarchive 3.5.0 is a feature and bugfix release.

New features:

• mtree digest reader support (#1347)
• completed support for UTF-8 encoding conversion (#1389)
• minor API enhancements (#1258, #1405)
• support for system extended attributes (#1409)
• support for decompression of symbolic links in zipx archives (#1435)

Important bugfixes:

• fixed extraction of archives with hard links pointing to itself (#1381)
• cpio fixes (#1387, #1388)
• fixed uninitialized size in rar5_read_data (#1408)
• fixed memory leaks in error case of archive_write_open() functions (#1456)

Thanks to all contributors and bug reporters.

Libarchive 3.4.3

Libarchive 3.4.3 is a feature and bugfix release.

New features:

• support for pzstd compressed files (#1357)
• support for RHT.security.selinux tar extended attribute (#1348)

Important bugfixes:

• various zstd fixes and improvements (#1342 #1352 #1359)
• child process handling fixes (#1372)

Thanks to all contributors and bug reporters.

Libarchive 3.4.2

Libarchive 3.4.2 is a feature and security release.

New features:

• support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
• support for mbed TLS (PolarSSL) (#1301)

Important bugfixes:

• security fixes in RAR5 reader (#1280 #1326)
• compression buffer fix in XAR writer (#1317)
• fix uname and gname longer than 32 characters in PAX writer (#1319)
• fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
• fix support for extracting 7z archive entries with Delta filter (#987)

Thanks to all contributors and bug reporters.
Special thanks to Christos Zoulas (@zoulasc) from NetBSD for the atomic file extraction feature.

Libarchive 3.4.1

Libarchive 3.4.1 is a feature and security release.

New features:

• Unicode filename support for reading lha/lzh archives
• New pax write option "xattrhdr"

Important bugfixes:

• security fixes in wide string processing (#1276 #1298)
• security fixes in RAR5 reader (#1212 #1217 #1296)
• security fixes and optimizations to write filter logic (#351)
• security fix related to use of readlink(2) (1dae5a5)
• sparse file handling fixes (#1218 #1260)

Thanks to all contributors and bug reporters for making libarchive such a great piece of software.

Libarchive 3.4.0

Libarchive 3.4.0 is a feature and security release.

Feature higlights:

• Support for file and directory symlinks on Windows
• Read support for RAR 5.0 archives
• Read support for ZIPX archives with xz, lzma, ppmd8 and bzip2 compression
• Support for non-recursive list and extract
• New tar option: --exclude-vcs
• Improved file attribute support on Linux and file flags support on FreeBSD
• 64-bit ar format support

Important bugfixes:

• fix reading Android APK archives (#1055 )
• fix problems related to unreadable directories (#1167)
• patches from OpenBSD to libarchive_fe/passphrase.c
• support extracting ACLs with in-entry comments (#1096)
• support extracting extattrs as non-root on non-user-writable files (#1023)
• a two-digit number of OSS-Fuzz issues was resolved in this release
• various resource leak, use-after-free and crash fixes

Thanks to all contributors and bug reporters for making libarchive such a great piece of software.
Special thanks to @antekone for implementing RAR 5.0 reader and ZIPX decompression support.

Feature and Security Release

Libarchive 3.3.3 is a feature and security release.

Feature Higlights:

• support for zstandard read and write filters

Important bugfixes:

• NO_OVERWRITE doesn't change existing directory attributes
• Many fixes for building with Visual Studio
• Avoid super-linear slowdown on malformed mtree files

Notes:

• The full official release is available from https://libarchive.org. Github's source code snapshots below do not contain the generated autoconf build files that are included with the official release.

Feature and Security Release

Libarchive 3.3.2 is a feature and security release.

Feature Higlights:

• librichacl support for Linux

Notes:

• The full official release is available from https://libarchive.org. Github's source code snapshots below do not contain the generated autoconf build files that are included with the official release.
• Linking libarchive against liblzo violates LZO GPL licence. Please don't distribute binary packages of libarchive linked against liblzo.

Feature and Security Release

Libarchive v3.3.1 includes a few minor patches to v3.3.0 to address build issues identified late in the v3.3.0 release.

Note: The full official release is available from https://libarchive.org. Github's source snapshot below does not contain the generated autoconf build files that are included with the official release.

Note for package maintainers: Linking libarchive against liblzo violates LZO GPL licence. Please don't distribute binary packages of libarchive linked against liblzo.

Feature and Security Release

Note: We found some last-minute issues with v3.3.0 and will release v3.3.1 to address those very shortly.

Libarchive 3.3.0 is a feature and security release. Over 20 people contributed to this release; only a few of whom are mentioned below. Thanks to everyone who has invested their time and effort to make libarchive such a great piece of software.

Highlights:

• Tar format can archive and restore NFSv4 ACLs on FreeBSD, Linux, and macOS. This is fully interoperable with star.
• Tar format can read and write SCHILY.xattr extended file attributes in addition to the LIBARCHIVE.xattr format, thanks to Stefan Berger. This provides compatibility with archives created by star and GNU tar.
• Many bugs reported by the OSS-Fuzz project have been fixed.
• Ngie Cooper fixed a number of issues reported by the Coverity source scanner.
• Jan Osusky contributed improvements to libarchive's file detection logic.

Note for package maintainers:

• Linking libarchive against liblzo violates LZO GPL licence. Please don't distribute binary packages of libarchive linked against liblzo.