JLSEC-2025-243 `list_item_verbose` in `tar/util.c` in libarchive through 3.7.7 does not check an strftime return...

listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custo...

CLSA-2025-1754338412 libarchive: Fix of CVE-2025-25724

CVE-2025-25724: fix crash in listitemverbose on invalid time...

Astra Linux - уязвимость в libarchive

listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custo...

The vulnerability of the list_item_verbose() function in the Libarchive library allows a hacker to execute arbitrary code on the target system.

The vulnerability of the listitemverbose function in the Libarchive library is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the target system...

Security update for libarchive

This update for libarchive fixes the following issues: CVE-2025-25724: Fixed buffer overflow vulnerability in function listitemverbose in tar/util.c bsc1238610. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...