Astra Linux – Vulnerability in libarchive

A issue was discovered in libarchive bsdtar before version 3.8.1, in the function applysubstitution in the file tar/subst.c, when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to a denial of service Out-of-Memory crash...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libarchive: bsdcat-3.8.9-2.1.hum1 aarch64, s390x, x8664 bsdcpio-3.8.9-2.1.hum1 aarch64, s390x, x8664 bsdtar-3.8.9-2.1.hum1 aarch64, s390x, x8664 bsdunzip-3.8.9-2.1.hum1 aarch64, s390x, x8664...

Rocky Linux 8 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc (crlea-2021_1580)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlea-20211580 advisory. For detailed information on changes in this release, see the Rocky Enterprise Software Foundation Enterprise Linux 8.4 Release Notes linked from the References...

Rocky Linux 8.6 [CIQ] Security Update: bsdtar / libarchive / libarchive-devel Multiple Vulnerabilities (ciqsa-2026_1341)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261341 advisory. This advisory aggregates security fixes for the libarchive SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2026-4424, CVE-2026-5121. Tenable has extracted...

Rocky Linux 10.1 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc (crlsa-2026_5063)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20265063 advisory. libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archivereaddata in libarchive CVE-2026-4111 Tenable has extracted the preceding description...

CentOS Linux 7 [TuxCare] Security Update: bsdcpio / bsdtar / libarchive / libarchive-devel (CENTOS7:CLSA-2025:1753377742)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1753377742 advisory. - listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or...

AlmaLinux 9.6 [TuxCare] Security Update: bsdcat / bsdcpio / bsdtar / libarchive / libarchive-devel (ALMALINUX9.6:CLSA-2026:1778894153)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778894153 advisory. - An issue was discovered in libarchive bsdtar before version 3.8.1 in function applysubstitution in file tar/subst.c when processing crafted...

AlmaLinux 9.6 [TuxCare] Security Update: bsdcat / bsdcpio / bsdtar / libarchive / libarchive-devel (ALMALINUX9.6:CLSA-2026:1776429223)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776429223 advisory. - A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the...

Rocky Linux 9.6 [CIQ] Security Update: bsdtar / libarchive / libarchive-devel Multiple Vulnerabilities (ciqsa-2026_1519)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261519 advisory. This advisory aggregates security fixes for the libarchive SRPM in CIQ LTS 9.6. It addresses 5 CVEs: CVE-2025-5917, CVE-2025-25724, CVE-2013-0211,...

Rocky Linux 9.6 [TuxCare] Security Update: bsdcat / bsdcpio / bsdtar / libarchive / libarchive-devel (ALMALINUX9.6:CLSA-2026:1778894153)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778894153 advisory. - An issue was discovered in libarchive bsdtar before version 3.8.1 in function applysubstitution in file tar/subst.c when processing craft...

Rocky Linux 9.4 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc (ciqsa-2026_0520)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260520 advisory. This advisory aggregates security fixes for the libarchive SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2025-5914. Tenable has extracted the preceding description...

Rocky Linux 9.2 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0396)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260396 advisory. This advisory aggregates security fixes for the libarchive SRPM in CIQ LTS 9.2. It addresses 5 CVEs: CVE-2022-26280, CVE-2022-36227, CVE-2025-25724,...

Rocky Linux 9.6 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc (ciqsa-2026_1461)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261461 advisory. This advisory aggregates security fixes for the libarchive SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-5121. Tenable has extracted the preceding description...

AlmaLinux 9.2 [TuxCare] Security Update: bsdcat / bsdcpio / bsdtar / libarchive / libarchive-devel (ALMALINUX9.2:CLSA-2026:1778893359)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778893359 advisory. - An issue was discovered in libarchive bsdtar before version 3.8.1 in function applysubstitution in file tar/subst.c when processing crafted...

CentOS Linux 7 [TuxCare] Security Update: bsdcpio / bsdtar / libarchive / libarchive-devel (CENTOS7:CLSA-2025:1751143694)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1751143694 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

Rocky Linux 9 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc (crlba-2022_3897)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlba-20223897 advisory. For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section. This advisory is provided by Ctrl IQ,...

AlmaLinux 9.2 [TuxCare] Security Update: bsdcat / bsdcpio / bsdtar / libarchive / libarchive-devel (ALMALINUX9.2:CLSA-2025:1751620336)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1751620336 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 9.6 [CIQ] Security Update: bsdtar / libarchive / libarchive-devel Multiple Vulnerabilities (ciqsa-2026_1511)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261511 advisory. This advisory aggregates security fixes for the libarchive SRPM in CIQ LTS 9.6. It addresses 4 CVEs: CVE-2025-5914, CVE-2026-4111, CVE-2026-5121,...

Rocky Linux 8.6 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0012)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260012 advisory. This advisory aggregates security fixes for the libarchive SRPM in CIQ LTS 8.6. It addresses 10 CVEs: CVE-2019-1000019, CVE-2019-19221, CVE-2022-36227,...

AlmaLinux 9.2 [TuxCare] Security Update: bsdcat / bsdcpio / bsdtar / libarchive / libarchive-devel (ALMALINUX9.2:CLSA-2026:1776430169)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1776430169 advisory. - A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the...