Read the docs
Red Hat Security Advisory

RHSA-2025:9420

libarchive security update

Released 2025-06-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 34

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00367 Published 2025-03-02 Partial fix CWE-252