- CVE-2013-0211: denial of service via unspecified vectors - CVE-2015-2304: directory traveral via absolute paths - crash/infinite loop on malformed CPIO archives From upstream git (commits 2253154, 5935715, 3865cf2, e6c9668, 24f5de6) via FreeBSD. Minor bump for the new ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS option.