update: libarchive

[dongsupark]

Name: libarchive CVEs: CVE-2024-26256, CVE-2024-37407 CVSSs: 7.8 Action Needed: update to >= 3.7.4

Summary:

• CVE-2024-26256: Remote code execution vulnerability, an out-of-bound error in rar e8 filter.
  • https://github.com/advisories/GHSA-2jc9-36w4-pmqw
  • Fix: https://github.com/libarchive/libarchive/pull/2135
• CVE-2024-37407: Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled. This occurs in slurp_central_directory in archive_read_support_format_zip.c.
  • https://bugzilla.redhat.com/show_bug.cgi?id=2292307
  • https://github.com/libarchive/libarchive/pull/2145

refmap.gentoo: TBD

[dongsupark]

Added CVE-2024-37407.