CentOS Linux 7 [TuxCare] Security Update: bsdcpio / bsdtar / libarchive / libarchive-devel (CENTOS7:CLSA-2026:1780922803)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1780922803 advisory. - A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validatio...

AlmaLinux 9.2 [TuxCare] Security Update: bsdcat / bsdcpio / bsdtar / libarchive / libarchive-devel (ALMALINUX9.2:CLSA-2026:1775647149)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1775647149 advisory. - Windows libarchive Remote Code Execution Vulnerability CVE-2024-20696 Note that Nessus has not tested for this issue but has instead relied...

Rocky Linux 8.6 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0012)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260012 advisory. This advisory aggregates security fixes for the libarchive SRPM in CIQ LTS 8.6. It addresses 10 CVEs: CVE-2019-1000019, CVE-2019-19221, CVE-2022-36227,...

Rocky Linux 9.6 [TuxCare] Security Update: bsdcat / bsdcpio / bsdtar / libarchive / libarchive-devel (ALMALINUX9.6:CLSA-2026:1776429223)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776429223 advisory. - A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the...

AlmaLinux 9.2 [TuxCare] Security Update: bsdcat / bsdcpio / bsdtar / libarchive / libarchive-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1777365744)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777365744 advisory. - A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper...

Rocky Linux 8 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc (crlea-2021_1580)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlea-20211580 advisory. For detailed information on changes in this release, see the Rocky Enterprise Software Foundation Enterprise Linux 8.4 Release Notes linked from the References...

CentOS Linux 7 [TuxCare] Security Update: bsdcpio / bsdtar / libarchive / libarchive-devel (CENTOS7:CLSA-2025:1751143694)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1751143694 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

Rocky Linux 9 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc (crlsa-2022_5252)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20225252 advisory. libarchive: an out-of-bounds read via the component zipxlzmaaloneinit CVE-2022-26280 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 10.1 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc (crlsa-2026_8492)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20268492 advisory. libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing CVE-2026-4424 Tenable has extracted the preceding descriptio...

Rocky Linux 9 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc (crlsa-2026_52674)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202652674 advisory. libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filteredbuf pointer in initunpack CVE-2026-14164 Tenable has extracted the preceding...

Rocky Linux 9 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc (crlsa-2025_14130)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202514130 advisory. libarchive: Double free at archivereadformatrarseekdata in archivereadsupportformatrar.c CVE-2025-5914 Tenable has extracted the preceding description block direct...

Rocky Linux 8.6 [CIQ] Security Update: bsdtar / libarchive / libarchive-devel Multiple Vulnerabilities (ciqsa-2026_1341)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261341 advisory. This advisory aggregates security fixes for the libarchive SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2026-4424, CVE-2026-5121. Tenable has extracted...

AlmaLinux 9.2 [TuxCare] Security Update: bsdcat / bsdcpio / bsdtar / libarchive / libarchive-devel (ALMALINUX9.2:CLSA-2026:1776872469)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1776872469 advisory. - A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper...

Rocky Linux 9.6 [TuxCare] Security Update: bsdcat / bsdcpio / bsdtar / libarchive / libarchive-devel (ALMALINUX9.6:CLSA-2026:1776873238)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776873238 advisory. - A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper...

AlmaLinux 9.6 [TuxCare] Security Update: bsdcat / bsdcpio / bsdtar / libarchive / libarchive-devel (ALMALINUX9.6:CLSA-2026:1776873238)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776873238 advisory. - A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper...

Rocky Linux 10.2 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc (crlsa-2026_52675)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202652675 advisory. libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filteredbuf pointer in initunpack CVE-2026-14164 Tenable has extracted the...

Rocky Linux 10.1 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc (crlsa-2026_5063)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20265063 advisory. libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archivereaddata in libarchive CVE-2026-4111 Tenable has extracted the preceding description...

Rocky Linux 9 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc (crlsa-2026_5080)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20265080 advisory. libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archivereaddata in libarchive CVE-2026-4111 Tenable has extracted the preceding description...

Rocky Linux 8 [CIQ] Security Update: bsdtar / bsdtar-debuginfo / libarchive / libarchive-debuginfo / etc (crlsa-2023_3018)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20233018 advisory. libarchive: NULL pointer dereference in archivewrite.c CVE-2022-36227 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor component uses multiple third-party libraries that are vulnerable to several security vulnerabilities. The CVE details are listed in the Vulnerability Details section below. This bulletin provides information about the affected components and the...