Summary
[3.7.7-5]
- Resolves: CVE-2026-4111
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | bsdtar | 0:3.7.7-5.el10_1 |
| Oracle Linux · 10 | libarchive | 0:3.7.7-5.el10_1 |
| Oracle Linux · 10 | libarchive-devel | 0:3.7.7-5.el10_1 |
Vulnerabilities 1
-
High 7.5
Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where interna…