AIKIDO-2026-10798

TL;DR

Reading certain RAR archives with comment metadata could throw during header handling instead of completing or failing in a controlled way. Some tar streams produced with oldgnu layouts can carry uid and gid values that overflow assumptions in header parsing and break reads for otherwise valid archives. LZMA-framed streams could miss end-of-stream handling in edge cases, leaving decompression in an inconsistent state when the payload does not match expectations. The release tightens those parse paths and adds regression coverage; failures remain catchable managed exceptions unless the host process opts not to handle them.