Medium ELSA-2026-52675 1 CVE

Moderate: libarchive security update (Oracle Linux 10)

Published Aug 10, 2026 · Updated Aug 10, 2026

Ecosystem: Oracle Linux

Summary

[3.7.7-10]
- Related: CVE-2026-14164

[3.7.7-9]
- Resolves: CVE-2026-14164

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 10	bsdtar	0:3.7.7-10.el10_2
Oracle Linux · 10	libarchive	0:3.7.7-10.el10_2
Oracle Linux · 10	libarchive-devel	0:3.7.7-10.el10_2

Vulnerabilities 1

High 7.5

CVE-2026-14164

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another arch…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Jun 30, 2026