Red Hat Security AdvisoryRHSA-2026:7106
libarchive security update
Released 2026-04-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) libarchive-devel-3.5.3-4.el9_4.2
- Red Hat Enterprise Linux AppStream EUS (v.9.4) bsdtar-3.5.3-4.el9_4.2, libarchive-devel-3.5.3-4.el9_4.2
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) libarchive-3.5.3-4.el9_4.2
Fixes 1 record
Priority MEDIUM 40
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00721 · Published 2026-03-13 · Partial fix · 3.7.7-5.el10_1, 3.7.7-5.el10_0 +33 CWE-835