Red Hat Security AdvisoryRHSA-2026:8944
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-04-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images libarchive-3.8.7-1.hum1@aarch64, libarchive-3.8.7-1.hum1@src, libarchive-3.8.7-1.hum1@x86_64 +2
Fixes 6 records
Priority MEDIUM 58
An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted -s substitution rules.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00206 · Published 2025-11-05 · Partial fix CWE-400
Priority MEDIUM 51
A flaw was found in libarchive.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01092 · Published 2026-03-30 · Partial fix · 3.1.2-14.el7_9.2, 3.3.3-7.el8_10 +51 CWE-190
Priority MEDIUM 41
A flaw was found in libarchive.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01287 · Published 2026-03-19 · Partial fix · 3.7.7-8.el10_1, 3.7.7-5.el10_0 +54 CWE-125
Priority MEDIUM 40
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00721 · Published 2026-03-13 · Partial fix · 3.7.7-5.el10_1, 3.7.7-5.el10_0 +33 CWE-835
Priority LOW 29
A flaw was found in libarchive.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00317 · Published 2026-03-19 · Partial fix · 3.8.7-1.hum1 CWE-1335
Priority LOW 24
A flaw was found in libarchive.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00167 · Published 2026-04-07 · Partial fix · 3.8.7-1.hum1 CWE-476
