Summary
[3.5.3-11]
- Related: CVE-2026-14164
[3.5.3-10]
- Resolves: CVE-2026-14164
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | bsdtar | 0:3.5.3-11.el9_8 |
| Oracle Linux · 9 | libarchive | 0:3.5.3-11.el9_8 |
| Oracle Linux · 9 | libarchive-devel | 0:3.5.3-11.el9_8 |
Vulnerabilities 1
-
High 7.5
Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()
A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another arch…