[SECURITY] Fedora 44 Update: libarchive-3.8.6-1.fc44

Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

CVE-2026-4426 affecting package libarchive for versions less than 3.7.7-6

CVE-2026-4426 affecting package libarchive for versions less than 3.7.7-6. A patched version of the package is available...

CVE-2026-4424 affecting package libarchive for versions less than 3.7.7-6

CVE-2026-4424 affecting package libarchive for versions less than 3.7.7-6. A patched version of the package is available...

CVE-2026-5121 affecting package libarchive for versions less than 3.7.7-6

CVE-2026-5121 affecting package libarchive for versions less than 3.7.7-6. A patched version of the package is available...

CLSA-2026-1776872469 libarchive: Fix of CVE-2026-4424

CVE-2026-4424: fix heap out-of-bounds read in RAR reader due to LZSS window size mismatch after PPMd block...

GHSA-2VWV-VQPV-V8VC vulnerabilities

Vulnerabilities for packages: libarchive...

CVE-2026-5121 vulnerabilities

Vulnerabilities for packages: libarchive...

GHSA-2VWV-VQPV-V8VC vulnerabilities

Vulnerabilities for packages: libarchive...

CVE-2026-5121 vulnerabilities

Vulnerabilities for packages: libarchive...

RHSA-2026:9592 Red Hat Security Advisory: libarchive security update

Bulletin has no description...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.38 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.38 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing

A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR...

Important: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for...

RHEL 8 : libarchive (RHSA-2026:9592)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:9592 advisory. The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660...

RHSA-2026:9026 Red Hat Security Advisory: libarchive security update

Bulletin has no description...

AlmaLinux 10 : libarchive (ALSA-2026:8492)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:8492 advisory. libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing CVE-2026-4424 Tenable has extracted the preceding description...

Photon OS 5.0: Libarchive PHSA-2026-5.0-0825

An update of the libarchive package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0825. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

MiracleLinux 8 : libarchive-3.3.3-7.el8_10 (AXSA:2026-475:03)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-475:03 advisory. libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing CVE-2026-4424 libarchive: libarchive: Arbitrary...

JLSEC-2026-153

An issue was discovered in libarchive bsdtar before version 3.8.1 in function applysubstitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service Out-of-Memory crash...