[CLSA-2025:1764778336] libarchive: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2025-12-03 16:12:19 UTC
Description:
- CVE-2025-5917: fix overflow in build_ustar_entry - CVE-2025-5918: do not skip past EOF while reading
Updated packages:
  • bsdcpio-3.1.2-14.el7_7.tuxcare.els3.x86_64.rpm
    sha:35de6059d4d8dbc896d7045a6056b884031eeb6612779144839735691f4ac6c2
  • bsdtar-3.1.2-14.el7_7.tuxcare.els3.x86_64.rpm
    sha:1b138d35be0a2ed911c452bb0a07b76ccac07f729d32e3ddecd115a1a5613d15
  • libarchive-3.1.2-14.el7_7.tuxcare.els3.i686.rpm
    sha:4be71e4e48ca309303b918b5d5c8a2fd5e19e3cc6a2e581f62d1fbb85e804f12
  • libarchive-3.1.2-14.el7_7.tuxcare.els3.x86_64.rpm
    sha:9bff9480d4086c33f29ed09eb4011b34c8f857cb3ac20df29d38106efda95098
  • libarchive-devel-3.1.2-14.el7_7.tuxcare.els3.i686.rpm
    sha:7af8b3d64bee4938fa5d41b29eb7dfb89ab87c9f49fb52cad9dff47a0a9b1509
  • libarchive-devel-3.1.2-14.el7_7.tuxcare.els3.x86_64.rpm
    sha:b2e1beebbd390bb2a64c1ca7009d370e80d35c1c07fe0305675586719bd89a6a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.