Photon OS 4.0: Libarchive PHSA-2025-4.0-0768

An update of the libarchive package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0768. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Slackware: Security Advisory (SSA:2025-079-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] libarchive

New libarchive packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libarchive-3.7.8-i586-1slack15.0.txz: Upgraded. This update fixes bugs and security issues: tar reader: Handle truncation in the...

CVE-2025-25724 vulnerabilities

Vulnerabilities for packages: libarchive...

CVE-2024-57970 vulnerabilities

Vulnerabilities for packages: libarchive...

CVE-2025-1632 vulnerabilities

Vulnerabilities for packages: libarchive...

GHSA-722W-734R-QG74 vulnerabilities

Vulnerabilities for packages: libarchive...

GHSA-CW9M-PJ72-3CJ5 vulnerabilities

Vulnerabilities for packages: libarchive...

GHSA-2Q66-6W43-8RM9 vulnerabilities

Vulnerabilities for packages: libarchive...

CBL Mariner 2.0 Security Update: libarchive (CVE-2025-25724)

The version of libarchive installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-25724 advisory. - listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which...

Slackware Linux 15.0 / current libarchive Multiple Vulnerabilities (SSA:2025-079-01)

The version of libarchive installed on the remote host is prior to 3.7.8. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-079-01 advisory. New libarchive packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

CVE-2025-25724 affecting package libarchive for versions less than 3.6.1-5

CVE-2025-25724 affecting package libarchive for versions less than 3.6.1-5. A patched version of the package is available...

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

...

GHSA-2Q66-6W43-8RM9 vulnerabilities

Vulnerabilities for packages: libarchive...

CVE-2025-25724 vulnerabilities

Vulnerabilities for packages: libarchive...

CVE-2024-57970 vulnerabilities

Vulnerabilities for packages: libarchive...

GHSA-722W-734R-QG74 vulnerabilities

Vulnerabilities for packages: libarchive...

CVE-2025-1632 vulnerabilities

Vulnerabilities for packages: libarchive...

GHSA-CW9M-PJ72-3CJ5 vulnerabilities

Vulnerabilities for packages: libarchive...

Mageia: Security Advisory (MGASA-2025-0102)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...