CVE-2016-10209 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-10209): The archive_wstring_append_from_mbs function in archive_string.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted archive file.
@Maintainers please confirm if we are affected by this, in that case, call for stabilization when ready. Thank you
FWICS the current stable 3.3.1 includes the fix and 3.2* has been cleaned up.
Repository is clean, all done.