Red Hat Security Advisory

RHSA-2025:7510

libarchive security update

Released 2025-05-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) bsdtar-3.7.7-2.el10_0, libarchive-devel-3.7.7-2.el10_0
Red Hat Enterprise Linux BaseOS (v. 10) libarchive-3.7.7-2.el10_0

Fixes 1 record

TI-2024-38198 CVE-2024-57970 · GHSA-2q66-6w43-8rm9

libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in…

LOW 18

libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.0025 Published 2025-02-16 Partial fix CWE-126