Summary
[3.1.2-14.0.3]
- Fix CVE-2026-4424 CVE-2026-5121 [Orabug: 39219508]
[3.1.2-14.0.1]
- rar: Fix double free [Orabug: 38364091][CVE-2025-5914]
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | bsdcpio | 0:3.1.2-14.0.3.el7_9 |
| Oracle Linux · 7 | bsdtar | 0:3.1.2-14.0.3.el7_9 |
| Oracle Linux · 7 | libarchive | 0:3.1.2-14.0.3.el7_9 |
| Oracle Linux · 7 | libarchive-devel | 0:3.1.2-14.0.3.el7_9 |
Vulnerabilities 2
-
High 7.5
Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this …
-
High 7.5
Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overfl…