libarchive: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• Low 3.9
  CVE-2025-5918

  Libarchive: reading past eof may be triggered for piped file streams

  A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, includin…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jun 9, 2025
• Low 2.8
  CVE-2025-5917

  Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c

  A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jun 9, 2025

Revision history

1. 2026-06-28 #11

   Neue Updates von openSUSE aufgenommen

2. 2026-04-06 #10

   Neue Updates von Ubuntu aufgenommen

3. 2025-11-11 #9

   Neue Updates von Debian aufgenommen

4. 2025-08-31 #8

   Neue Updates von SUSE aufgenommen

5. 2025-08-27 #7

   Neue Updates von SUSE aufgenommen

6. 2025-08-20 #6

   Neue Updates von SUSE aufgenommen

7. 2025-08-06 #5

   Neue Updates von SUSE aufgenommen

8. 2025-07-30 #4

   Neue Updates von Amazon aufgenommen

9. 2025-07-27 #3

   Neue Updates von openSUSE aufgenommen

10. 2025-06-26 #2

    Neue Updates von Ubuntu aufgenommen

11. 2025-06-09 #1

    Initiale Fassung

References

• GitHub Security Advisory GHSA-29vm-vjqm-q2mx vom 2025-06-09
  https://github.com/advisories/GHSA-29vm-vjqm-q2mx
• GitHub Security Advisory GHSA-3hqh-8h99-q2cf vom 2025-06-09
  https://github.com/advisories/GHSA-3hqh-8h99-q2cf
• Ubuntu Security Notice USN-7601-1 vom 2025-06-26
  https://ubuntu.com/security/notices/USN-7601-1
• openSUSE Security Update OPENSUSE-SU-2025:0270-1 vom 2025-07-27
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/34KS33R3ZSVM733HWPALA4YFDY2DNLVH/
• Amazon Linux Security Advisory ALAS2-2025-2932 vom 2025-07-30
  https://alas.aws.amazon.com/AL2/ALAS2-2025-2932.html
• SUSE Security Update SUSE-SU-2025:02566-1 vom 2025-07-31
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EBANGIJHQZXY3BPUEUHJM7W2SHGJ7Z22/
• SUSE Security Update SUSE-SU-2025:02718-1 vom 2025-08-06
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/K3IHYC3ZVNWSS3EWPIMOEL4Q3ZZSFORT/
• SUSE Security Update SUSE-SU-2025:02718-2 vom 2025-08-20
  https://lists.suse.com/pipermail/sle-security-updates/2025-August/022239.html
• SUSE Security Update SUSE-SU-2025:20560-1 vom 2025-08-28
  https://lists.suse.com/pipermail/sle-security-updates/2025-August/022320.html
• SUSE Security Update SUSE-SU-2025:20594-1 vom 2025-08-29
  https://lists.suse.com/pipermail/sle-security-updates/2025-August/022368.html
• Debian Security Advisory DLA-4368 vom 2025-11-11
  https://lists.debian.org/debian-lts-announce/2025/11/msg00011.html
• Ubuntu Security Notice USN-8147-1 vom 2026-04-06
  https://ubuntu.com/security/notices/USN-8147-1
• openSUSE Security Update OPENSUSE-SU-2026:0221-1 vom 2026-06-29
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZCI2G6N3RHVUBE5YUJE3ZNQT6LVHXV5S/