Summary
[3.7.7-11]
- Related: CVE-2026-16517 and CVE-2026-15028
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | bsdtar | 0:3.7.7-11.el10_2 |
| Oracle Linux · 10 | libarchive | 0:3.7.7-11.el10_2 |
| Oracle Linux · 10 | libarchive-devel | 0:3.7.7-11.el10_2 |
Vulnerabilities 2
-
Low 3.9
Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header
A flaw was found in libarchive. This vulnerability allows a remote attacker to trigger a heap overflow by providing a specially crafted tar archive. The issue occurs during the parsing of a PAX extended header containing a malformed SUN.holesdata sparse-file …
-
Low 2.9
Libarchive: libarchive: signed integer overflow in archive_write_zip_header
A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archive_write_zip_header function in archive_write_set_format_zip.c, when ZIP encryption is enabled and the entry file size is close to INT64_MAX, the addition of the encrypt…