Red Hat Security Advisory

RHSA-2026:69553

libarchive security update

Released 2026-09-21 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) bsdtar-3.7.7-11.el10_2, libarchive-devel-3.7.7-11.el10_2
Red Hat Enterprise Linux BaseOS (v. 10) libarchive-3.7.7-11.el10_2

TI-2026-12649 CVE-2026-15028 · GHSA-p59g-85vj-3mvf

LOW 20

A flaw was found in libarchive.

CVSS 3.1LOW 3.9 Local Low privileges User interaction EPSS 0.00204 Published 2026-07-10 Partial fix · 3.7.7-11.el10_2, 1791460851 +1 CWE-805

TI-2026-13786 CVE-2026-16517 · GHSA-j8w5-8rj6-wpwf

LOW 13

A signed integer overflow vulnerability was found in libarchive's ZIP writer.

CVSS 3.1LOW 2.9 Local No auth No interaction EPSS 0.00105 Published 2026-07-21 Partial fix · 3.7.7-11.el10_2, 3.8.8-3.1.hum1 CWE-190