Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.61 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.61 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2026-1125)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2026-1176)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.10.1 : libarchive (EulerOS-SA-2026-1125)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling...

EulerOS Virtualization 2.10.0 : libarchive (EulerOS-SA-2026-1176)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling...

📄 libarchive RAR Double Free / Use-After-Free

This proof of concept demonstrates a memory management flaw in libarchive versions prior to 3.8.0 when handling malformed RAR headers. By supplying a corrupted RAR structure, the code forces error paths during archive parsing, leading to improper cleanup. As a result, the archive object may be...

Azure Linux 3.0 Security Update: libarchive (CVE-2024-37407)

The version of libarchive installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-37407 advisory. - Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and...

Azure Linux 3.0 Security Update: libarchive (CVE-2025-1632)

The version of libarchive installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-1632 advisory. - A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects...

MiracleLinux 8 : libarchive-3.3.3-5.el8 (AXSA:2023-5565:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5565:02 advisory. libarchive: NULL pointer dereference in archivewrite.c CVE-2022-36227 Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 8 : libarchive-3.3.3-3.el8 (AXSA:2022-3102:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3102:01 advisory. libarchive: extracting a symlink with ACLs modifies ACLs of target CVE-2021-23177 libarchive: symbolic links incorrectly followed when changing mode...

MiracleLinux 8 : libarchive-3.3.2-9.el8 (AXSA:2020-1004:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-1004:02 advisory. libarchive: out-of-bounds read in archivewstringappendfrommbs in archivestring.c CVE-2019-19221 Tenable has extracted the preceding description block directl...

MiracleLinux 9 : libarchive-3.5.3-2.el9 (AXSA:2022-3983:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3983:02 advisory. libarchive: an out-of-bounds read via the component zipxlzmaaloneinit CVE-2022-26280 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : libarchive-3.5.3-4.el9 (AXSA:2023-5392:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5392:01 advisory. libarchive: NULL pointer dereference in archivewrite.c CVE-2022-36227 Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 7 : libarchive-3.1.2-14.el7 (AXSA:2020-4444:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-4444:01 advisory. libarchive: use-after-free in archivereadformatrarreaddata when there is an error in the decompression of an archive entry CVE-2019-18408 Tenable has extract...

MiracleLinux 7 : libarchive-3.1.2-12.el7 (AXSA:2019-4084:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4084:01 advisory. libarchive: Double free in RAR decoder resulting in a denial of service CVE-2018-1000877 libarchive: Use after free in RAR decoder resulting in a...

MiracleLinux 4 : libarchive-2.8.3-7.AXS4 (AXSA:2016-659:01)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2016-659:01 advisory. Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, severa...

MiracleLinux 7 : libarchive-3.1.2-10.el7 (AXSA:2016-661:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2016-661:01 advisory. Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, severa...

MiracleLinux 4 : libarchive-2.8.3-3.AXS4 (AXSA:2012-68:01)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2012-68:01 advisory. Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, several...

MiracleLinux 7 : libarchive-3.1.2-14.0.2.el7.AXS7 (AXSA:2025-10751:03)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10751:03 advisory. CVE-2025-25724: fix buffer overflow vulnerability in libarchive CVEs: CVE-2025-25724 listitemverbose in tar/util.c in libarchive through 3.7.7 does not chec...

MiracleLinux 9 : libarchive-3.5.3-6.el9_6 (AXSA:2025-10772:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10772:05 advisory. libarchive: Double free at archivereadformatrarseekdata in archivereadsupportformatrar.c CVE-2025-5914 Tenable has extracted the preceding description block...