Skip to content
OpenAdvisories
Medium RHSA-2026:24383 1 CVE

Red Hat Security Advisory: libarchive security update

Published Jun 9, 2026 · Updated Aug 22, 2026

Ecosystem: Red Hat

Fixed packages 13

ReleasePackageFixed in
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::appstream bsdcat-debuginfo 0:3.5.3-5.el9_4.1
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::appstream bsdcpio-debuginfo 0:3.5.3-5.el9_4.1
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::appstream bsdtar 0:3.5.3-5.el9_4.1
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::appstream bsdtar-debuginfo 0:3.5.3-5.el9_4.1
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::appstream libarchive-debuginfo 0:3.5.3-5.el9_4.1
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::appstream libarchive-debugsource 0:3.5.3-5.el9_4.1
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::appstream libarchive-devel 0:3.5.3-5.el9_4.1
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::baseos bsdcat-debuginfo 0:3.5.3-5.el9_4.1
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::baseos bsdcpio-debuginfo 0:3.5.3-5.el9_4.1
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::baseos bsdtar-debuginfo 0:3.5.3-5.el9_4.1
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::baseos libarchive 0:3.5.3-5.el9_4.1
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::baseos libarchive-debuginfo 0:3.5.3-5.el9_4.1
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::baseos libarchive-debugsource 0:3.5.3-5.el9_4.1

Vulnerabilities 1

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2349221
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24383.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-25724
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-25724
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-25724
  • article
    https://gist.github.com/Ekkosun/a83870ce7f3b7813b9b462a395e8ad92
  • article
    https://github.com/Ekkosun/pocs/blob/main/bsdtarbug
  • article
    https://github.com/libarchive/libarchive/blob/b439d586f53911c84be5e380445a8a259e19114c/tar/util.c#L751-L752