Summary
[3.5.3-7]
- Resolves: CVE-2026-4111
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | bsdtar | 0:3.5.3-7.el9_7 |
| Oracle Linux · 9 | libarchive | 0:3.5.3-7.el9_7 |
| Oracle Linux · 9 | libarchive-devel | 0:3.5.3-7.el9_7 |
Vulnerabilities 1
-
High 7.5
Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where interna…