Summary
[3.7.7-8]
- Resolves: CVE-2026-4424
[3.7.7-7]
- Release bump for typo in dist
[3.7.7-6]
- Release bump
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | bsdtar | 0:3.7.7-8.el10_1 |
| Oracle Linux · 10 | libarchive | 0:3.7.7-8.el10_1 |
| Oracle Linux · 10 | libarchive-devel | 0:3.7.7-8.el10_1 |
Vulnerabilities 1
-
High 7.5
Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this …