Red Hat Security Advisory

RHSA-2026:43818

Red Hat Hardened Images RPMs Security Update

Released 2026-07-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images bsdcat-3.8.8-3.1.hum1@aarch64, bsdcat-3.8.8-3.1.hum1@x86_64, bsdcpio-3.8.8-3.1.hum1@aarch64 +10

Fixes 2 records

TI-2025-39512 CVE-2025-64031 · GHSA-pqgv-phc2-5p8r

Heap-based buffer overflow in libarchive

MEDIUM 46

libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archive_compressor_gzip_open in archive_write_add_filter_gzip.c, aka GHSA-92wx-p669-8gr9.

CVSS 3.1LOW 2.5 Local No auth User interaction EPSS 0.0016 Published 2026-09-14 Partial fix · 3.8.2 CWE-122

TI-2026-13786 CVE-2026-16517 · GHSA-j8w5-8rj6-wpwf

Libarchive: libarchive: signed integer overflow in archive_write_zip_header

LOW 13

A signed integer overflow vulnerability was found in libarchive's ZIP writer.

CVSS 3.1LOW 2.9 Local No auth No interaction EPSS 0.00105 Published 2026-07-21 Partial fix · 3.7.7-11.el10_2, 3.8.8-3.1.hum1 CWE-190