Vulnerability-Lookup

CVE-2025-5914 (GCVE-0-2025-5914)

Vulnerability from cvelistv5 – Published: 2025-06-09 19:53 – Updated: 2026-06-05 00:13

Title

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

Summary

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-190 - Integer Overflow or Wraparound

Assigner

redhat

References

32 references

URL	Tags
https://access.redhat.com/errata/RHSA-2025:14130	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:14135	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:14137	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:14141	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:14142	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:14525	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:14528	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:14594	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:14644	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:14808	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:14810	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:14828	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:15024	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:15397	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:15709	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:15827	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:15828	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:16524	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:18217	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:18218	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:18219	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19041	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19046	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:21885	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:21913	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:0326	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:0934	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:1541	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2025-5914	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2370861	issue-trackingx_refsource_REDHAT
https://github.com/libarchive/libarchive/pull/2598
https://github.com/libarchive/libarchive/releases…

Impacted products

55 products

Vendor	Product	Version
		Affected: 0 , < 3.8.0 (semver)
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:3.7.7-4.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.0
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:3.1.2-14.el7_9.1 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:3.3.3-6.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::crb cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	Unaffected: 0:3.3.2-8.el8_2.1 , < * (rpm) cpe:/o:redhat:rhel_aus:8.2::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:3.3.3-1.el8_4.1 , < * (rpm) cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	Unaffected: 0:3.3.3-1.el8_4.1 , < * (rpm) cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 0:3.3.3-6.el8_6 , < * (rpm) cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_e4s:8.6::baseos cpe:/o:redhat:rhel_tus:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	Unaffected: 0:3.3.3-6.el8_6 , < * (rpm) cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_e4s:8.6::baseos cpe:/o:redhat:rhel_tus:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	Unaffected: 0:3.3.3-6.el8_6 , < * (rpm) cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_e4s:8.6::baseos cpe:/o:redhat:rhel_tus:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 0:3.3.3-5.el8_8.1 , < * (rpm) cpe:/o:redhat:rhel_e4s:8.8::baseos cpe:/o:redhat:rhel_tus:8.8::baseos
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 0:3.3.3-5.el8_8.1 , < * (rpm) cpe:/o:redhat:rhel_e4s:8.8::baseos cpe:/o:redhat:rhel_tus:8.8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:3.5.3-6.el9_6 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	Unaffected: 0:3.5.3-2.el9_0.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.0::appstream cpe:/o:redhat:rhel_e4s:9.0::baseos
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:3.5.3-5.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2::appstream cpe:/o:redhat:rhel_e4s:9.2::baseos
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	Unaffected: 0:3.5.3-4.el9_4.1 , < * (rpm) cpe:/a:redhat:rhel_eus:9.4::appstream cpe:/a:redhat:rhel_eus:9.4::crb cpe:/o:redhat:rhel_eus:9.4::baseos
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 414.92.202510211419-0 , < * (rpm) cpe:/a:redhat:openshift:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 415.92.202601271320-0 , < * (rpm) cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 416.94.202601071926-0 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 417.94.202510112152-0 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 418.94.202510230424-0 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 4.19.9.6.202510140714-0 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 4.20.9.6.202509251656-0 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat Web Terminal 1.11 on RHEL 9	Unaffected: 1.11-19 , < * (rpm) cpe:/a:redhat:webterminal:1.11::el9
Red Hat	Red Hat Web Terminal 1.11 on RHEL 9	Unaffected: 1.11-8 , < * (rpm) cpe:/a:redhat:webterminal:1.11::el9
Red Hat	Red Hat Web Terminal 1.12 on RHEL 9	Unaffected: 1.12-4 , < * (rpm) cpe:/a:redhat:webterminal:1.12::el9
Red Hat	RHOSS-1.36-RHEL-8	Unaffected: 1.36.0-11 , < * (rpm) cpe:/a:redhat:openshift_serverless:1.36::el8
Red Hat	RHOSS-1.36-RHEL-8	Unaffected: 1.36.0-10 , < * (rpm) cpe:/a:redhat:openshift_serverless:1.36::el8
Red Hat	RHOSS-1.36-RHEL-8	Unaffected: 1.36.0-4 , < * (rpm) cpe:/a:redhat:openshift_serverless:1.36::el8
Red Hat	RHOSS-1.36-RHEL-8	Unaffected: 1.36.0-9 , < * (rpm) cpe:/a:redhat:openshift_serverless:1.36::el8
Red Hat	RHOSS-1.36-RHEL-8	Unaffected: 1.36.0-12 , < * (rpm) cpe:/a:redhat:openshift_serverless:1.36::el8
Red Hat	RHOSS-1.36-RHEL-8	Unaffected: 1.36.0-18 , < * (rpm) cpe:/a:redhat:openshift_serverless:1.36::el8
Red Hat	RHOSS-1.36-RHEL-8	Unaffected: 1.36.0-7 , < * (rpm) cpe:/a:redhat:openshift_serverless:1.36::el8
Red Hat	cert-manager operator for Red Hat OpenShift 1.16	Unaffected: v1.16.5-1760515757 , < * (rpm) cpe:/a:redhat:cert_manager:1.16::el9
Red Hat	OpenShift Compliance Operator 1	Unaffected: 1.8.0 , < * (rpm) cpe:/a:redhat:openshift_compliance_operator:1::el9
Red Hat	OpenShift File Integrity Operator - FIO 1	Unaffected: v1.3 , < * (rpm) cpe:/a:redhat:openshift_file_integrity_operator:1::el9
Red Hat	Red Hat Discovery 2	Unaffected: 2.2.1-1758555934 , < * (rpm) cpe:/a:redhat:discovery:2::el9
Red Hat	Red Hat Insights proxy 1.5	Unaffected: 1.5.6-1756187445 , < * (rpm) cpe:/a:redhat:insights_proxy:1.5::el9
Red Hat	Red Hat OpenShift distributed tracing 3.5.1	Unaffected: rhosdt-3.5-1756116455 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.5::el8
Red Hat	Red Hat OpenShift distributed tracing 3.5.1	Unaffected: rhosdt-3.5-1756116482 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.5::el8
Red Hat	Red Hat OpenShift distributed tracing 3.5.1	Unaffected: rhosdt-3.5-1756116441 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.5::el8
Red Hat	Red Hat OpenShift distributed tracing 3.5.1	Unaffected: rhosdt-3.5-1756116449 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.5::el8
Red Hat	Red Hat OpenShift distributed tracing 3.5.1	Unaffected: rhosdt-3.5-1756116439 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.5::el8
Red Hat	Red Hat OpenShift distributed tracing 3.5.1	Unaffected: rhosdt-3.5-1756116447 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.5::el8
Red Hat	Red Hat OpenShift distributed tracing 3.5.1	Unaffected: rhosdt-3.5-1756128595 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.5::el8
Red Hat	Red Hat OpenShift distributed tracing 3.5.1	Unaffected: rhosdt-3.5-1756125872 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.5::el8
Red Hat	Red Hat OpenShift distributed tracing 3.5.1	Unaffected: rhosdt-3.5-1756116445 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.5::el8
Red Hat	Red Hat OpenShift sandboxed containers 1.1	Unaffected: 1.10.2-1757422110 , < * (rpm) cpe:/a:redhat:confidential_compute_attestation:1.10::el9
Red Hat	Red Hat OpenShift sandboxed containers 1.1	Unaffected: 1.10.2-1757421846 , < * (rpm) cpe:/a:redhat:confidential_compute_attestation:1.10::el9
Red Hat	Red Hat OpenShift sandboxed containers 1.1	Unaffected: 1.10.2-1757421804 , < * (rpm) cpe:/a:redhat:confidential_compute_attestation:1.10::el9
Red Hat	Red Hat OpenShift sandboxed containers 1.1	Unaffected: 1.10.2-1757422070 , < * (rpm) cpe:/a:redhat:confidential_compute_attestation:1.10::el9
Red Hat	Red Hat OpenShift sandboxed containers 1.1	Unaffected: 1.10.2-1757421879 , < * (rpm) cpe:/a:redhat:confidential_compute_attestation:1.10::el9
Red Hat	Red Hat OpenShift sandboxed containers 1.1	Unaffected: 1.10.2-1757422401 , < * (rpm) cpe:/a:redhat:confidential_compute_attestation:1.10::el9
Red Hat	Red Hat OpenShift sandboxed containers 1.1	Unaffected: 1.10.2-1757421890 , < * (rpm) cpe:/a:redhat:confidential_compute_attestation:1.10::el9
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6

Date Public

2025-05-20 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-5914",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-10T15:14:35.773233Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-10T15:30:42.589Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/libarchive/libarchive/pull/2598"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://github.com/libarchive/libarchive/",
          "defaultStatus": "unaffected",
          "packageName": "libarchive",
          "versions": [
            {
              "lessThan": "3.8.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.0"
          ],
          "defaultStatus": "affected",
          "packageName": "libarchive",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.7.7-4.el10_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:7"
          ],
          "defaultStatus": "affected",
          "packageName": "libarchive",
          "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.1.2-14.el7_9.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::crb",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libarchive",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.3.3-6.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.2::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libarchive",
          "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.3.2-8.el8_2.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.4::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libarchive",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.3.3-1.el8_4.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.4::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libarchive",
          "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.3.3-1.el8_4.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_e4s:8.6::baseos",
            "cpe:/o:redhat:rhel_tus:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libarchive",
          "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.3.3-6.el8_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_e4s:8.6::baseos",
            "cpe:/o:redhat:rhel_tus:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libarchive",
          "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.3.3-6.el8_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_e4s:8.6::baseos",
            "cpe:/o:redhat:rhel_tus:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libarchive",
          "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.3.3-6.el8_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:8.8::baseos",
            "cpe:/o:redhat:rhel_tus:8.8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libarchive",
          "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.3.3-5.el8_8.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:8.8::baseos",
            "cpe:/o:redhat:rhel_tus:8.8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libarchive",
          "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.3.3-5.el8_8.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libarchive",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.5.3-6.el9_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libarchive",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.5.3-6.el9_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.0::appstream",
            "cpe:/o:redhat:rhel_e4s:9.0::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libarchive",
          "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.5.3-2.el9_0.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.2::appstream",
            "cpe:/o:redhat:rhel_e4s:9.2::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libarchive",
          "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.5.3-5.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.4::appstream",
            "cpe:/a:redhat:rhel_eus:9.4::crb",
            "cpe:/o:redhat:rhel_eus:9.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libarchive",
          "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.5.3-4.el9_4.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.14::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.14",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "414.92.202510211419-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "415.92.202601271320-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "416.94.202601071926-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "417.94.202510112152-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "418.94.202510230424-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.19::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.19",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.19.9.6.202510140714-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.20::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.20",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.20.9.6.202509251656-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:webterminal:1.11::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "web-terminal/web-terminal-rhel9-operator",
          "product": "Red Hat Web Terminal 1.11 on RHEL 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.11-19",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:webterminal:1.11::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "web-terminal/web-terminal-tooling-rhel9",
          "product": "Red Hat Web Terminal 1.11 on RHEL 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.11-8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:webterminal:1.12::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "web-terminal/web-terminal-tooling-rhel9",
          "product": "Red Hat Web Terminal 1.12 on RHEL 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.12-4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_serverless:1.36::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-serverless-1/logic-data-index-ephemeral-rhel8",
          "product": "RHOSS-1.36-RHEL-8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.36.0-11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_serverless:1.36::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-serverless-1/logic-data-index-postgresql-rhel8",
          "product": "RHOSS-1.36-RHEL-8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.36.0-11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_serverless:1.36::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-serverless-1/logic-db-migrator-tool-rhel8",
          "product": "RHOSS-1.36-RHEL-8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.36.0-11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_serverless:1.36::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8",
          "product": "RHOSS-1.36-RHEL-8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.36.0-10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_serverless:1.36::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8",
          "product": "RHOSS-1.36-RHEL-8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.36.0-10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_serverless:1.36::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8",
          "product": "RHOSS-1.36-RHEL-8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.36.0-4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_serverless:1.36::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-serverless-1/logic-management-console-rhel8",
          "product": "RHOSS-1.36-RHEL-8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.36.0-9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_serverless:1.36::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-serverless-1/logic-operator-bundle",
          "product": "RHOSS-1.36-RHEL-8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.36.0-12",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_serverless:1.36::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-serverless-1/logic-rhel8-operator",
          "product": "RHOSS-1.36-RHEL-8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.36.0-18",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_serverless:1.36::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-serverless-1/logic-swf-builder-rhel8",
          "product": "RHOSS-1.36-RHEL-8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.36.0-11",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_serverless:1.36::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-serverless-1/logic-swf-devmode-rhel8",
          "product": "RHOSS-1.36-RHEL-8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.36.0-7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:cert_manager:1.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "cert-manager/jetstack-cert-manager-rhel9",
          "product": "cert-manager operator for Red Hat OpenShift 1.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v1.16.5-1760515757",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_compliance_operator:1::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "compliance/openshift-compliance-must-gather-rhel8",
          "product": "OpenShift Compliance Operator 1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.8.0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_compliance_operator:1::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "compliance/openshift-compliance-openscap-rhel8",
          "product": "OpenShift Compliance Operator 1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.8.0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_compliance_operator:1::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "compliance/openshift-compliance-rhel8-operator",
          "product": "OpenShift Compliance Operator 1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.8.0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_file_integrity_operator:1::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "compliance/openshift-file-integrity-rhel8-operator",
          "product": "OpenShift File Integrity Operator - FIO 1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v1.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:discovery:2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "discovery/discovery-server-rhel9",
          "product": "Red Hat Discovery 2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2.2.1-1758555934",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:insights_proxy:1.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "insights-proxy/insights-proxy-container-rhel9",
          "product": "Red Hat Insights proxy 1.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.5.6-1756187445",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/jaeger-agent-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3.5.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "rhosdt-3.5-1756116455",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/jaeger-all-in-one-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3.5.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "rhosdt-3.5-1756116482",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/jaeger-collector-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3.5.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "rhosdt-3.5-1756116441",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/jaeger-es-index-cleaner-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3.5.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "rhosdt-3.5-1756116449",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/jaeger-es-rollover-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3.5.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "rhosdt-3.5-1756116439",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/jaeger-ingester-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3.5.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "rhosdt-3.5-1756116447",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/jaeger-operator-bundle",
          "product": "Red Hat OpenShift distributed tracing 3.5.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "rhosdt-3.5-1756128595",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/jaeger-query-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3.5.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "rhosdt-3.5-1756125872",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/jaeger-rhel8-operator",
          "product": "Red Hat OpenShift distributed tracing 3.5.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "rhosdt-3.5-1756116445",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9",
          "product": "Red Hat OpenShift sandboxed containers 1.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.10.2-1757422110",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-sandboxed-containers/osc-cloud-api-adaptor-webhook-rhel9",
          "product": "Red Hat OpenShift sandboxed containers 1.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.10.2-1757421846",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
          "product": "Red Hat OpenShift sandboxed containers 1.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.10.2-1757421804",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-sandboxed-containers/osc-must-gather-rhel9",
          "product": "Red Hat OpenShift sandboxed containers 1.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.10.2-1757422070",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-sandboxed-containers/osc-podvm-builder-rhel9",
          "product": "Red Hat OpenShift sandboxed containers 1.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.10.2-1757421879",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
          "product": "Red Hat OpenShift sandboxed containers 1.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.10.2-1757422401",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-sandboxed-containers/osc-rhel9-operator",
          "product": "Red Hat OpenShift sandboxed containers 1.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.10.2-1757421890",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "libarchive",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2025-05-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "Integer Overflow or Wraparound",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-05T00:13:24.064Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2025:14130",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:14130"
        },
        {
          "name": "RHSA-2025:14135",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:14135"
        },
        {
          "name": "RHSA-2025:14137",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:14137"
        },
        {
          "name": "RHSA-2025:14141",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:14141"
        },
        {
          "name": "RHSA-2025:14142",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:14142"
        },
        {
          "name": "RHSA-2025:14525",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:14525"
        },
        {
          "name": "RHSA-2025:14528",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:14528"
        },
        {
          "name": "RHSA-2025:14594",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:14594"
        },
        {
          "name": "RHSA-2025:14644",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:14644"
        },
        {
          "name": "RHSA-2025:14808",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:14808"
        },
        {
          "name": "RHSA-2025:14810",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:14810"
        },
        {
          "name": "RHSA-2025:14828",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:14828"
        },
        {
          "name": "RHSA-2025:15024",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:15024"
        },
        {
          "name": "RHSA-2025:15397",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:15397"
        },
        {
          "name": "RHSA-2025:15709",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:15709"
        },
        {
          "name": "RHSA-2025:15827",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:15827"
        },
        {
          "name": "RHSA-2025:15828",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:15828"
        },
        {
          "name": "RHSA-2025:16524",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:16524"
        },
        {
          "name": "RHSA-2025:18217",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:18217"
        },
        {
          "name": "RHSA-2025:18218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:18218"
        },
        {
          "name": "RHSA-2025:18219",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:18219"
        },
        {
          "name": "RHSA-2025:19041",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19041"
        },
        {
          "name": "RHSA-2025:19046",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19046"
        },
        {
          "name": "RHSA-2025:21885",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:21885"
        },
        {
          "name": "RHSA-2025:21913",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:21913"
        },
        {
          "name": "RHSA-2026:0326",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:0326"
        },
        {
          "name": "RHSA-2026:0934",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:0934"
        },
        {
          "name": "RHSA-2026:1541",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:1541"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2025-5914"
        },
        {
          "name": "RHBZ#2370861",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
        },
        {
          "url": "https://github.com/libarchive/libarchive/pull/2598"
        },
        {
          "url": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2025-06-06T17:58:25.491Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2025-05-20T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-190: Integer Overflow or Wraparound"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2025-5914",
    "datePublished": "2025-06-09T19:53:48.923Z",
    "dateReserved": "2025-06-09T08:10:18.779Z",
    "dateUpdated": "2026-06-05T00:13:24.064Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-5914",
      "date": "2026-06-14",
      "epss": "0.00114",
      "percentile": "0.29885"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-5914\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2025-06-09T20:15:26.123\",\"lastModified\":\"2026-02-05T20:15:52.523\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.\"},{\"lang\":\"es\",\"value\":\"Se ha identificado una vulnerabilidad en la librer\u00eda libarchive, espec\u00edficamente en la funci\u00f3n archive_read_format_rar_seek_data(). Esta falla implica un desbordamiento de enteros que puede provocar una condici\u00f3n de doble liberaci\u00f3n. Explotar una vulnerabilidad de doble liberaci\u00f3n puede provocar corrupci\u00f3n de memoria, lo que permite a un atacante ejecutar c\u00f3digo arbitrario o causar una denegaci\u00f3n de servicio.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-190\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.8.0\",\"matchCriteriaId\":\"FCC41392-D22A-4BE5-B7E7-DE5D6BA40052\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"932D137F-528B-4526-9A89-CD59FA1AB0FE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4CFF558-3C47-480D-A2F0-BABF26042943\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F6FB57C-2BC7-487C-96DD-132683AEB35D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D65C2163-CFC2-4ABB-8F4E-CB09CEBD006C\"}]}]}],\"references\":[{\"url\":\"https://access.redhat.com/errata/RHSA-2025:14130\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:14135\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:14137\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:14141\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:14142\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:14525\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:14528\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:14594\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:14644\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:14808\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:14810\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:14828\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:15024\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:15397\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:15709\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:15827\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:15828\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:16524\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:18217\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:18218\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:18219\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19041\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19046\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:21885\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:21913\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:0326\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:0934\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1541\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2025-5914\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2370861\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/libarchive/libarchive/pull/2598\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://github.com/libarchive/libarchive/releases/tag/v3.8.0\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/libarchive/libarchive/pull/2598\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Patch\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-5914\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-06-10T15:14:35.773233Z\"}}}], \"references\": [{\"url\": \"https://github.com/libarchive/libarchive/pull/2598\", \"tags\": [\"exploit\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-06-10T14:23:42.747Z\"}}], \"cna\": {\"title\": \"Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"3.8.0\", \"versionType\": \"semver\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://github.com/libarchive/libarchive/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.7.7-4.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.1.2-14.el7_9.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::crb\", \"cpe:/o:redhat:enterprise_linux:8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.3-6.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.2::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.2 Advanced Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.2-8.el8_2.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.4::baseos\", \"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.3-1.el8_4.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.4::baseos\", \"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.3-1.el8_4.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/o:redhat:rhel_e4s:8.6::baseos\", \"cpe:/o:redhat:rhel_tus:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.3-6.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/o:redhat:rhel_e4s:8.6::baseos\", \"cpe:/o:redhat:rhel_tus:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.3-6.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/o:redhat:rhel_e4s:8.6::baseos\", \"cpe:/o:redhat:rhel_tus:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.3-6.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:8.8::baseos\", \"cpe:/o:redhat:rhel_tus:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.3-5.el8_8.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:8.8::baseos\", \"cpe:/o:redhat:rhel_tus:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.3-5.el8_8.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/o:redhat:enterprise_linux:9::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.5.3-6.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/o:redhat:enterprise_linux:9::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.5.3-6.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\", \"cpe:/o:redhat:rhel_e4s:9.0::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.5.3-2.el9_0.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\", \"cpe:/o:redhat:rhel_e4s:9.2::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.5.3-5.el9_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\", \"cpe:/a:redhat:rhel_eus:9.4::crb\", \"cpe:/o:redhat:rhel_eus:9.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.5.3-4.el9_4.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"414.92.202510211419-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"415.92.202601271320-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"416.94.202601071926-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"417.94.202510112152-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"418.94.202510230424-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.19.9.6.202510140714-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.20.9.6.202509251656-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.11 on RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.11-19\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.11 on RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.11-8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-tooling-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.12 on RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.12-4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-tooling-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_serverless:1.36::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHOSS-1.36-RHEL-8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.36.0-11\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-serverless-1/logic-data-index-ephemeral-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_serverless:1.36::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHOSS-1.36-RHEL-8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.36.0-11\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-serverless-1/logic-data-index-postgresql-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_serverless:1.36::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHOSS-1.36-RHEL-8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.36.0-11\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-serverless-1/logic-db-migrator-tool-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_serverless:1.36::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHOSS-1.36-RHEL-8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.36.0-10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-serverless-1/logic-jobs-service-ephemeral-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_serverless:1.36::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHOSS-1.36-RHEL-8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.36.0-10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-serverless-1/logic-jobs-service-postgresql-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_serverless:1.36::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHOSS-1.36-RHEL-8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.36.0-4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_serverless:1.36::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHOSS-1.36-RHEL-8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.36.0-9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-serverless-1/logic-management-console-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_serverless:1.36::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHOSS-1.36-RHEL-8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.36.0-12\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-serverless-1/logic-operator-bundle\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_serverless:1.36::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHOSS-1.36-RHEL-8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.36.0-18\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-serverless-1/logic-rhel8-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_serverless:1.36::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHOSS-1.36-RHEL-8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.36.0-11\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-serverless-1/logic-swf-builder-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_serverless:1.36::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHOSS-1.36-RHEL-8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.36.0-7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-serverless-1/logic-swf-devmode-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager operator for Red Hat OpenShift 1.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"v1.16.5-1760515757\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cert-manager/jetstack-cert-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Compliance Operator 1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.8.0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compliance/openshift-compliance-must-gather-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Compliance Operator 1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.8.0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compliance/openshift-compliance-openscap-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Compliance Operator 1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.8.0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compliance/openshift-compliance-rhel8-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift File Integrity Operator - FIO 1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"v1.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compliance/openshift-file-integrity-rhel8-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2.2.1-1758555934\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"discovery/discovery-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:insights_proxy:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Insights proxy 1.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.5.6-1756187445\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"insights-proxy/insights-proxy-container-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.5.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"rhosdt-3.5-1756116455\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/jaeger-agent-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.5.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"rhosdt-3.5-1756116482\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/jaeger-all-in-one-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.5.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"rhosdt-3.5-1756116441\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/jaeger-collector-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.5.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"rhosdt-3.5-1756116449\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/jaeger-es-index-cleaner-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.5.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"rhosdt-3.5-1756116439\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/jaeger-es-rollover-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.5.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"rhosdt-3.5-1756116447\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/jaeger-ingester-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.5.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"rhosdt-3.5-1756128595\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/jaeger-operator-bundle\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.5.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"rhosdt-3.5-1756125872\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/jaeger-query-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.5.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"rhosdt-3.5-1756116445\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/jaeger-rhel8-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift sandboxed containers 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.10.2-1757422110\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift sandboxed containers 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.10.2-1757421846\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-sandboxed-containers/osc-cloud-api-adaptor-webhook-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift sandboxed containers 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.10.2-1757421804\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-sandboxed-containers/osc-monitor-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift sandboxed containers 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.10.2-1757422070\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-sandboxed-containers/osc-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift sandboxed containers 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.10.2-1757421879\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-sandboxed-containers/osc-podvm-builder-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift sandboxed containers 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.10.2-1757422401\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-sandboxed-containers/osc-podvm-payload-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift sandboxed containers 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.10.2-1757421890\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-sandboxed-containers/osc-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2025-06-06T17:58:25.491Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2025-05-20T00:00:00.000Z\", \"value\": \"Made public.\"}], \"datePublic\": \"2025-05-20T00:00:00.000Z\", \"references\": [{\"url\": \"https://access.redhat.com/errata/RHSA-2025:14130\", \"name\": \"RHSA-2025:14130\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:14135\", \"name\": \"RHSA-2025:14135\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:14137\", \"name\": \"RHSA-2025:14137\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:14141\", \"name\": \"RHSA-2025:14141\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:14142\", \"name\": \"RHSA-2025:14142\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:14525\", \"name\": \"RHSA-2025:14525\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:14528\", \"name\": \"RHSA-2025:14528\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:14594\", \"name\": \"RHSA-2025:14594\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:14644\", \"name\": \"RHSA-2025:14644\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:14808\", \"name\": \"RHSA-2025:14808\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:14810\", \"name\": \"RHSA-2025:14810\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:14828\", \"name\": \"RHSA-2025:14828\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:15024\", \"name\": \"RHSA-2025:15024\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:15397\", \"name\": \"RHSA-2025:15397\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:15709\", \"name\": \"RHSA-2025:15709\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:15827\", \"name\": \"RHSA-2025:15827\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:15828\", \"name\": \"RHSA-2025:15828\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:16524\", \"name\": \"RHSA-2025:16524\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:18217\", \"name\": \"RHSA-2025:18217\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:18218\", \"name\": \"RHSA-2025:18218\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:18219\", \"name\": \"RHSA-2025:18219\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19041\", \"name\": \"RHSA-2025:19041\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19046\", \"name\": \"RHSA-2025:19046\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:21885\", \"name\": \"RHSA-2025:21885\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:21913\", \"name\": \"RHSA-2025:21913\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:0326\", \"name\": \"RHSA-2026:0326\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:0934\", \"name\": \"RHSA-2026:0934\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1541\", \"name\": \"RHSA-2026:1541\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/security/cve/CVE-2025-5914\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2370861\", \"name\": \"RHBZ#2370861\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://github.com/libarchive/libarchive/pull/2598\"}, {\"url\": \"https://github.com/libarchive/libarchive/releases/tag/v3.8.0\"}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-190\", \"description\": \"Integer Overflow or Wraparound\"}]}], \"providerMetadata\": {\"orgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"shortName\": \"redhat\", \"dateUpdated\": \"2026-06-05T00:13:24.064Z\"}, \"x_redhatCweChain\": \"CWE-190: Integer Overflow or Wraparound\"}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-5914\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-06-05T00:13:24.064Z\", \"dateReserved\": \"2025-06-09T08:10:18.779Z\", \"assignerOrgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"datePublished\": \"2025-06-09T19:53:48.923Z\", \"assignerShortName\": \"redhat\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2025-5914

Vulnerability from fkie_nvd - Published: 2025-06-09 20:15 - Updated: 2026-02-05 20:15

Severity

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:14130	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:14135	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:14137	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:14141	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:14142	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:14525	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:14528	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:14594	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:14644	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:14808	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:14810	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:14828	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:15024	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:15397	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:15709	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:15827	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:15828	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:16524	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:18217	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:18218	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:18219	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:19041	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:19046	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:21885	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2025:21913	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:0326	Third Party Advisory
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:0934
secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:1541
secalert@redhat.com	https://access.redhat.com/security/cve/CVE-2025-5914	Third Party Advisory
secalert@redhat.com	https://bugzilla.redhat.com/show_bug.cgi?id=2370861	Issue Tracking, Third Party Advisory
secalert@redhat.com	https://github.com/libarchive/libarchive/pull/2598	Exploit, Issue Tracking, Patch
secalert@redhat.com	https://github.com/libarchive/libarchive/releases/tag/v3.8.0	Release Notes
134c704f-9b21-4f2e-91b3-4a467353bcc0	https://github.com/libarchive/libarchive/pull/2598	Exploit, Issue Tracking, Patch

Impacted products

Vendor	Product	Version
libarchive	libarchive	*
redhat	openshift_container_platform	4.0
redhat	enterprise_linux	6.0
redhat	enterprise_linux	7.0
redhat	enterprise_linux	8.0
redhat	enterprise_linux	9.0
redhat	enterprise_linux	10.0

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FCC41392-D22A-4BE5-B7E7-DE5D6BA40052",
              "versionEndExcluding": "3.8.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "932D137F-528B-4526-9A89-CD59FA1AB0FE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F6FB57C-2BC7-487C-96DD-132683AEB35D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "D65C2163-CFC2-4ABB-8F4E-CB09CEBD006C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad en la librer\u00eda libarchive, espec\u00edficamente en la funci\u00f3n archive_read_format_rar_seek_data(). Esta falla implica un desbordamiento de enteros que puede provocar una condici\u00f3n de doble liberaci\u00f3n. Explotar una vulnerabilidad de doble liberaci\u00f3n puede provocar corrupci\u00f3n de memoria, lo que permite a un atacante ejecutar c\u00f3digo arbitrario o causar una denegaci\u00f3n de servicio."
    }
  ],
  "id": "CVE-2025-5914",
  "lastModified": "2026-02-05T20:15:52.523",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "secalert@redhat.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2025-06-09T20:15:26.123",
  "references": [
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:14130"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:14135"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:14137"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:14141"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:14142"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:14525"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:14528"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:14594"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:14644"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:14808"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:14810"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:14828"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:15024"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:15397"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:15709"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:15827"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:15828"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:16524"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:18217"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:18218"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:18219"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:19041"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:19046"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:21885"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2025:21913"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2026:0326"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:0934"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:1541"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/security/cve/CVE-2025-5914"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Patch"
      ],
      "url": "https://github.com/libarchive/libarchive/pull/2598"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Release Notes"
      ],
      "url": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Patch"
      ],
      "url": "https://github.com/libarchive/libarchive/pull/2598"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-190"
        }
      ],
      "source": "secalert@redhat.com",
      "type": "Secondary"
    }
  ]
}

GHSA-7376-X4RM-3V8X

Vulnerability from github – Published: 2025-06-09 21:30 – Updated: 2026-02-05 21:32

Details

Severity

3.9 (Low)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-5914"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-190",
      "CWE-415"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-06-09T20:15:26Z",
    "severity": "LOW"
  },
  "details": "A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.",
  "id": "GHSA-7376-x4rm-3v8x",
  "modified": "2026-02-05T21:32:35Z",
  "published": "2025-06-09T21:30:52Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5914"
    },
    {
      "type": "WEB",
      "url": "https://github.com/libarchive/libarchive/pull/2598"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:14130"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:16524"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:18217"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:18218"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:18219"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:19041"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:19046"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:21885"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:21913"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:0326"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:0934"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:1541"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2025-5914"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
    },
    {
      "type": "WEB",
      "url": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:14135"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:14137"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:14141"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:14142"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:14525"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:14528"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:14594"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:14644"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:14808"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:14810"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:14828"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:15024"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:15397"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:15709"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:15827"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:15828"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L",
      "type": "CVSS_V3"
    }
  ]
}

MSRC_CVE-2025-5914

Vulnerability from csaf_microsoft - Published: 2025-06-02 00:00 - Updated: 2025-09-03 23:49

Summary

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

Notes

Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

CVE-2025-5914

7.3 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE-415 - Double Free

Affected products

Fixed 4 products

Product	Identifier	Version	Remediation
Unresolved product id: 20388-17086		—
Unresolved product id: 19277-17084		—
Unresolved product id: 19704-17086		—
Unresolved product id: 20422-17084		—

Known affected 4 products

Product	Version	Remediation
Unresolved product id: 17086-2	—	Vendor Fix fix
Unresolved product id: 17084-4	—	Vendor Fix fix
Unresolved product id: 17086-3	—	Vendor Fix fix
Unresolved product id: 17084-1	—	Vendor Fix fix

References

4 references

URL	Category
https://msrc.microsoft.com/csaf/vex/2025/msrc_cve…	self
https://support.microsoft.com/lifecycle	external
https://www.first.org/cvss	external
https://msrc.microsoft.com/csaf/vex/2025/msrc_cve…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2025-5914 Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-5914.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
    "tracking": {
      "current_release_date": "2025-09-03T23:49:02.000Z",
      "generator": {
        "date": "2025-10-20T03:23:37.608Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2025-5914",
      "initial_release_date": "2025-06-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2025-09-03T23:49:02.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "CBL Mariner 2.0",
                  "product_id": "17086"
                }
              },
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 libarchive 3.6.1-7",
                "product": {
                  "name": "\u003ccbl2 libarchive 3.6.1-7",
                  "product_id": "2"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 libarchive 3.6.1-7",
                "product": {
                  "name": "cbl2 libarchive 3.6.1-7",
                  "product_id": "20388"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cazl3 libarchive 3.7.7-2",
                "product": {
                  "name": "\u003cazl3 libarchive 3.7.7-2",
                  "product_id": "4"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 libarchive 3.7.7-2",
                "product": {
                  "name": "azl3 libarchive 3.7.7-2",
                  "product_id": "19277"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 libarchive 3.6.1-6",
                "product": {
                  "name": "\u003ccbl2 libarchive 3.6.1-6",
                  "product_id": "3"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 libarchive 3.6.1-6",
                "product": {
                  "name": "cbl2 libarchive 3.6.1-6",
                  "product_id": "19704"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cazl3 libarchive 3.7.7-3",
                "product": {
                  "name": "\u003cazl3 libarchive 3.7.7-3",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 libarchive 3.7.7-3",
                "product": {
                  "name": "azl3 libarchive 3.7.7-3",
                  "product_id": "20422"
                }
              }
            ],
            "category": "product_name",
            "name": "libarchive"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 libarchive 3.6.1-7 as a component of CBL Mariner 2.0",
          "product_id": "17086-2"
        },
        "product_reference": "2",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 libarchive 3.6.1-7 as a component of CBL Mariner 2.0",
          "product_id": "20388-17086"
        },
        "product_reference": "20388",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 libarchive 3.7.7-2 as a component of Azure Linux 3.0",
          "product_id": "17084-4"
        },
        "product_reference": "4",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 libarchive 3.7.7-2 as a component of Azure Linux 3.0",
          "product_id": "19277-17084"
        },
        "product_reference": "19277",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 libarchive 3.6.1-6 as a component of CBL Mariner 2.0",
          "product_id": "17086-3"
        },
        "product_reference": "3",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 libarchive 3.6.1-6 as a component of CBL Mariner 2.0",
          "product_id": "19704-17086"
        },
        "product_reference": "19704",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 libarchive 3.7.7-3 as a component of Azure Linux 3.0",
          "product_id": "17084-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 libarchive 3.7.7-3 as a component of Azure Linux 3.0",
          "product_id": "20422-17084"
        },
        "product_reference": "20422",
        "relates_to_product_reference": "17084"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-5914",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "general",
          "text": "redhat",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "20388-17086",
          "19277-17084",
          "19704-17086",
          "20422-17084"
        ],
        "known_affected": [
          "17086-2",
          "17084-4",
          "17086-3",
          "17084-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-5914 Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-5914.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-09-03T23:49:02.000Z",
          "details": "3.6.1-7:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-2",
            "17086-3"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2025-09-03T23:49:02.000Z",
          "details": "3.7.7-3:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17084-4",
            "17084-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 7.3,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "17086-2",
            "17084-4",
            "17086-3",
            "17084-1"
          ]
        }
      ],
      "title": "Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c"
    }
  ]
}

RHSA-2025:14130

Vulnerability from csaf_redhat - Published: 2025-08-20 06:37 - Updated: 2026-06-05 00:24

Summary

Red Hat Security Advisory: libarchive security update

Severity

Important

Notes

Topic: An update for libarchive is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c (CVE-2025-5914) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-5914

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 80 products

Product	Version	Remediation
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.src	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.x86_64	—	Vendor Fix fix

Threats

Impact Important

References

10 references

URL	Category
https://access.redhat.com/errata/RHSA-2025:14130	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2370861	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-5914	self
https://bugzilla.redhat.com/show_bug.cgi?id=2370861	external
https://www.cve.org/CVERecord?id=CVE-2025-5914	external
https://nvd.nist.gov/vuln/detail/CVE-2025-5914	external
https://github.com/libarchive/libarchive/pull/2598	external
https://github.com/libarchive/libarchive/releases…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libarchive is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.\n\nSecurity Fix(es):\n\n* libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c (CVE-2025-5914)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:14130",
        "url": "https://access.redhat.com/errata/RHSA-2025:14130"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2370861",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14130.json"
      }
    ],
    "title": "Red Hat Security Advisory: libarchive security update",
    "tracking": {
      "current_release_date": "2026-06-05T00:24:35+00:00",
      "generator": {
        "date": "2026-06-05T00:24:35+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2025:14130",
      "initial_release_date": "2025-08-20T06:37:09+00:00",
      "revision_history": [
        {
          "date": "2025-08-20T06:37:09+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-20T06:37:09+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-05T00:24:35+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.6.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS (v. 9)",
                  "product_id": "BaseOS-9.6.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bsdtar-0:3.5.3-6.el9_6.aarch64",
                "product": {
                  "name": "bsdtar-0:3.5.3-6.el9_6.aarch64",
                  "product_id": "bsdtar-0:3.5.3-6.el9_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.5.3-6.el9_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.5.3-6.el9_6.aarch64",
                "product": {
                  "name": "libarchive-devel-0:3.5.3-6.el9_6.aarch64",
                  "product_id": "libarchive-devel-0:3.5.3-6.el9_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.5.3-6.el9_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.5.3-6.el9_6.aarch64",
                "product": {
                  "name": "libarchive-debugsource-0:3.5.3-6.el9_6.aarch64",
                  "product_id": "libarchive-debugsource-0:3.5.3-6.el9_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.5.3-6.el9_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.aarch64",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.aarch64",
                  "product_id": "bsdcat-debuginfo-0:3.5.3-6.el9_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.5.3-6.el9_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.aarch64",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.aarch64",
                  "product_id": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.5.3-6.el9_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.aarch64",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.aarch64",
                  "product_id": "bsdtar-debuginfo-0:3.5.3-6.el9_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.5.3-6.el9_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.aarch64",
                "product": {
                  "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.aarch64",
                  "product_id": "libarchive-debuginfo-0:3.5.3-6.el9_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.5.3-6.el9_6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-0:3.5.3-6.el9_6.aarch64",
                "product": {
                  "name": "libarchive-0:3.5.3-6.el9_6.aarch64",
                  "product_id": "libarchive-0:3.5.3-6.el9_6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.5.3-6.el9_6?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bsdtar-0:3.5.3-6.el9_6.ppc64le",
                "product": {
                  "name": "bsdtar-0:3.5.3-6.el9_6.ppc64le",
                  "product_id": "bsdtar-0:3.5.3-6.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.5.3-6.el9_6?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.5.3-6.el9_6.ppc64le",
                "product": {
                  "name": "libarchive-devel-0:3.5.3-6.el9_6.ppc64le",
                  "product_id": "libarchive-devel-0:3.5.3-6.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.5.3-6.el9_6?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.5.3-6.el9_6.ppc64le",
                "product": {
                  "name": "libarchive-debugsource-0:3.5.3-6.el9_6.ppc64le",
                  "product_id": "libarchive-debugsource-0:3.5.3-6.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.5.3-6.el9_6?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.ppc64le",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.ppc64le",
                  "product_id": "bsdcat-debuginfo-0:3.5.3-6.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.5.3-6.el9_6?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.ppc64le",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.ppc64le",
                  "product_id": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.5.3-6.el9_6?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.ppc64le",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.ppc64le",
                  "product_id": "bsdtar-debuginfo-0:3.5.3-6.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.5.3-6.el9_6?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.ppc64le",
                "product": {
                  "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.ppc64le",
                  "product_id": "libarchive-debuginfo-0:3.5.3-6.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.5.3-6.el9_6?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-0:3.5.3-6.el9_6.ppc64le",
                "product": {
                  "name": "libarchive-0:3.5.3-6.el9_6.ppc64le",
                  "product_id": "libarchive-0:3.5.3-6.el9_6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.5.3-6.el9_6?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bsdtar-0:3.5.3-6.el9_6.x86_64",
                "product": {
                  "name": "bsdtar-0:3.5.3-6.el9_6.x86_64",
                  "product_id": "bsdtar-0:3.5.3-6.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.5.3-6.el9_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.5.3-6.el9_6.x86_64",
                "product": {
                  "name": "libarchive-devel-0:3.5.3-6.el9_6.x86_64",
                  "product_id": "libarchive-devel-0:3.5.3-6.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.5.3-6.el9_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.5.3-6.el9_6.x86_64",
                "product": {
                  "name": "libarchive-debugsource-0:3.5.3-6.el9_6.x86_64",
                  "product_id": "libarchive-debugsource-0:3.5.3-6.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.5.3-6.el9_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.x86_64",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.x86_64",
                  "product_id": "bsdcat-debuginfo-0:3.5.3-6.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.5.3-6.el9_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.x86_64",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.x86_64",
                  "product_id": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.5.3-6.el9_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.x86_64",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.x86_64",
                  "product_id": "bsdtar-debuginfo-0:3.5.3-6.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.5.3-6.el9_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.x86_64",
                "product": {
                  "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.x86_64",
                  "product_id": "libarchive-debuginfo-0:3.5.3-6.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.5.3-6.el9_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-0:3.5.3-6.el9_6.x86_64",
                "product": {
                  "name": "libarchive-0:3.5.3-6.el9_6.x86_64",
                  "product_id": "libarchive-0:3.5.3-6.el9_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.5.3-6.el9_6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.5.3-6.el9_6.i686",
                "product": {
                  "name": "libarchive-devel-0:3.5.3-6.el9_6.i686",
                  "product_id": "libarchive-devel-0:3.5.3-6.el9_6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.5.3-6.el9_6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.5.3-6.el9_6.i686",
                "product": {
                  "name": "libarchive-debugsource-0:3.5.3-6.el9_6.i686",
                  "product_id": "libarchive-debugsource-0:3.5.3-6.el9_6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.5.3-6.el9_6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.i686",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.i686",
                  "product_id": "bsdcat-debuginfo-0:3.5.3-6.el9_6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.5.3-6.el9_6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.i686",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.i686",
                  "product_id": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.5.3-6.el9_6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.i686",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.i686",
                  "product_id": "bsdtar-debuginfo-0:3.5.3-6.el9_6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.5.3-6.el9_6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.i686",
                "product": {
                  "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.i686",
                  "product_id": "libarchive-debuginfo-0:3.5.3-6.el9_6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.5.3-6.el9_6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-0:3.5.3-6.el9_6.i686",
                "product": {
                  "name": "libarchive-0:3.5.3-6.el9_6.i686",
                  "product_id": "libarchive-0:3.5.3-6.el9_6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.5.3-6.el9_6?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bsdtar-0:3.5.3-6.el9_6.s390x",
                "product": {
                  "name": "bsdtar-0:3.5.3-6.el9_6.s390x",
                  "product_id": "bsdtar-0:3.5.3-6.el9_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.5.3-6.el9_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.5.3-6.el9_6.s390x",
                "product": {
                  "name": "libarchive-devel-0:3.5.3-6.el9_6.s390x",
                  "product_id": "libarchive-devel-0:3.5.3-6.el9_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.5.3-6.el9_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.5.3-6.el9_6.s390x",
                "product": {
                  "name": "libarchive-debugsource-0:3.5.3-6.el9_6.s390x",
                  "product_id": "libarchive-debugsource-0:3.5.3-6.el9_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.5.3-6.el9_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.s390x",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.s390x",
                  "product_id": "bsdcat-debuginfo-0:3.5.3-6.el9_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.5.3-6.el9_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.s390x",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.s390x",
                  "product_id": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.5.3-6.el9_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.s390x",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.s390x",
                  "product_id": "bsdtar-debuginfo-0:3.5.3-6.el9_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.5.3-6.el9_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.s390x",
                "product": {
                  "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.s390x",
                  "product_id": "libarchive-debuginfo-0:3.5.3-6.el9_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.5.3-6.el9_6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-0:3.5.3-6.el9_6.s390x",
                "product": {
                  "name": "libarchive-0:3.5.3-6.el9_6.s390x",
                  "product_id": "libarchive-0:3.5.3-6.el9_6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.5.3-6.el9_6?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.5.3-6.el9_6.src",
                "product": {
                  "name": "libarchive-0:3.5.3-6.el9_6.src",
                  "product_id": "libarchive-0:3.5.3-6.el9_6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.5.3-6.el9_6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.aarch64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-6.el9_6.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.i686"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-6.el9_6.i686",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.ppc64le"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-6.el9_6.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.s390x"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-6.el9_6.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.x86_64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-6.el9_6.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.aarch64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.i686"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.i686",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.ppc64le"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.s390x"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.x86_64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-6.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.aarch64"
        },
        "product_reference": "bsdtar-0:3.5.3-6.el9_6.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.ppc64le"
        },
        "product_reference": "bsdtar-0:3.5.3-6.el9_6.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-6.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.s390x"
        },
        "product_reference": "bsdtar-0:3.5.3-6.el9_6.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.x86_64"
        },
        "product_reference": "bsdtar-0:3.5.3-6.el9_6.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.aarch64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-6.el9_6.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.i686"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-6.el9_6.i686",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.ppc64le"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-6.el9_6.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.s390x"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-6.el9_6.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.x86_64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-6.el9_6.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-6.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.aarch64"
        },
        "product_reference": "libarchive-0:3.5.3-6.el9_6.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-6.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.i686"
        },
        "product_reference": "libarchive-0:3.5.3-6.el9_6.i686",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.ppc64le"
        },
        "product_reference": "libarchive-0:3.5.3-6.el9_6.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-6.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.s390x"
        },
        "product_reference": "libarchive-0:3.5.3-6.el9_6.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-6.el9_6.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.src"
        },
        "product_reference": "libarchive-0:3.5.3-6.el9_6.src",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.x86_64"
        },
        "product_reference": "libarchive-0:3.5.3-6.el9_6.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.aarch64"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-6.el9_6.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.i686"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-6.el9_6.i686",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.ppc64le"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-6.el9_6.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.s390x"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-6.el9_6.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.x86_64"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-6.el9_6.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-6.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.aarch64"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-6.el9_6.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-6.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.i686"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-6.el9_6.i686",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.ppc64le"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-6.el9_6.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-6.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.s390x"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-6.el9_6.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.x86_64"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-6.el9_6.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-6.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.aarch64"
        },
        "product_reference": "libarchive-devel-0:3.5.3-6.el9_6.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-6.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.i686"
        },
        "product_reference": "libarchive-devel-0:3.5.3-6.el9_6.i686",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.ppc64le"
        },
        "product_reference": "libarchive-devel-0:3.5.3-6.el9_6.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-6.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.s390x"
        },
        "product_reference": "libarchive-devel-0:3.5.3-6.el9_6.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.x86_64"
        },
        "product_reference": "libarchive-devel-0:3.5.3-6.el9_6.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.aarch64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-6.el9_6.aarch64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.i686"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-6.el9_6.i686",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.ppc64le"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-6.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.s390x"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-6.el9_6.s390x",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.x86_64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-6.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.aarch64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.aarch64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.i686"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.i686",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.ppc64le"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.s390x"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.s390x",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.x86_64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-6.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-6.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.aarch64"
        },
        "product_reference": "bsdtar-0:3.5.3-6.el9_6.aarch64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.ppc64le"
        },
        "product_reference": "bsdtar-0:3.5.3-6.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-6.el9_6.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.s390x"
        },
        "product_reference": "bsdtar-0:3.5.3-6.el9_6.s390x",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.x86_64"
        },
        "product_reference": "bsdtar-0:3.5.3-6.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.aarch64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-6.el9_6.aarch64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.i686"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-6.el9_6.i686",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.ppc64le"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-6.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.s390x"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-6.el9_6.s390x",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.x86_64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-6.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-6.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.aarch64"
        },
        "product_reference": "libarchive-0:3.5.3-6.el9_6.aarch64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-6.el9_6.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.i686"
        },
        "product_reference": "libarchive-0:3.5.3-6.el9_6.i686",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.ppc64le"
        },
        "product_reference": "libarchive-0:3.5.3-6.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-6.el9_6.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.s390x"
        },
        "product_reference": "libarchive-0:3.5.3-6.el9_6.s390x",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-6.el9_6.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.src"
        },
        "product_reference": "libarchive-0:3.5.3-6.el9_6.src",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.x86_64"
        },
        "product_reference": "libarchive-0:3.5.3-6.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.aarch64"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-6.el9_6.aarch64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.i686"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-6.el9_6.i686",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.ppc64le"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-6.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.s390x"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-6.el9_6.s390x",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.x86_64"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-6.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-6.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.aarch64"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-6.el9_6.aarch64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-6.el9_6.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.i686"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-6.el9_6.i686",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.ppc64le"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-6.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-6.el9_6.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.s390x"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-6.el9_6.s390x",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.x86_64"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-6.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-6.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.aarch64"
        },
        "product_reference": "libarchive-devel-0:3.5.3-6.el9_6.aarch64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-6.el9_6.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.i686"
        },
        "product_reference": "libarchive-devel-0:3.5.3-6.el9_6.i686",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.ppc64le"
        },
        "product_reference": "libarchive-devel-0:3.5.3-6.el9_6.ppc64le",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-6.el9_6.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.s390x"
        },
        "product_reference": "libarchive-devel-0:3.5.3-6.el9_6.s390x",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.x86_64"
        },
        "product_reference": "libarchive-devel-0:3.5.3-6.el9_6.x86_64",
        "relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-5914",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2025-06-06T17:58:25.491000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2370861"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has rated this vulnerability as Important because it allows a local attacker with limited privileges to trigger a double-free in libarchive\u0027s RAR parser by providing a specially crafted RAR archive. Successful exploitation could result in code execution or application crashes.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.aarch64",
          "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.i686",
          "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.ppc64le",
          "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.s390x",
          "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.x86_64",
          "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.aarch64",
          "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.i686",
          "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.ppc64le",
          "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.s390x",
          "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.x86_64",
          "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.aarch64",
          "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.ppc64le",
          "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.s390x",
          "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.x86_64",
          "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.aarch64",
          "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.i686",
          "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.ppc64le",
          "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.s390x",
          "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.x86_64",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.aarch64",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.i686",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.ppc64le",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.s390x",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.src",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.x86_64",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.aarch64",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.i686",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.ppc64le",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.s390x",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.x86_64",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.aarch64",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.i686",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.ppc64le",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.s390x",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.x86_64",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.aarch64",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.i686",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.ppc64le",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.s390x",
          "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.x86_64",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.aarch64",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.i686",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.s390x",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.x86_64",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.aarch64",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.i686",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.s390x",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.x86_64",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.aarch64",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.s390x",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.x86_64",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.aarch64",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.i686",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.s390x",
          "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.x86_64",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.aarch64",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.i686",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.s390x",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.src",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.x86_64",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.aarch64",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.i686",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.s390x",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.x86_64",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.aarch64",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.i686",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.s390x",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.x86_64",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.aarch64",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.i686",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.ppc64le",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.s390x",
          "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "RHBZ#2370861",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-5914",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5914",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "https://github.com/libarchive/libarchive/pull/2598",
          "url": "https://github.com/libarchive/libarchive/pull/2598"
        },
        {
          "category": "external",
          "summary": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0",
          "url": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0"
        }
      ],
      "release_date": "2025-05-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-20T06:37:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.aarch64",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.i686",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.ppc64le",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.s390x",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.x86_64",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.aarch64",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.i686",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.ppc64le",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.s390x",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.x86_64",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.aarch64",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.ppc64le",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.s390x",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.x86_64",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.aarch64",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.i686",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.ppc64le",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.s390x",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.x86_64",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.aarch64",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.i686",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.ppc64le",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.s390x",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.src",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.x86_64",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.aarch64",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.i686",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.ppc64le",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.s390x",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.x86_64",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.aarch64",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.i686",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.ppc64le",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.s390x",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.x86_64",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.aarch64",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.i686",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.ppc64le",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.s390x",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.aarch64",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.i686",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.s390x",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.aarch64",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.i686",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.s390x",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.aarch64",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.s390x",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.aarch64",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.i686",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.s390x",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.aarch64",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.i686",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.s390x",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.src",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.aarch64",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.i686",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.s390x",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.aarch64",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.i686",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.s390x",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.aarch64",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.i686",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.s390x",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:14130"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.aarch64",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.i686",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.ppc64le",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.s390x",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.x86_64",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.aarch64",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.i686",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.ppc64le",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.s390x",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.x86_64",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.aarch64",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.ppc64le",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.s390x",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.x86_64",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.aarch64",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.i686",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.ppc64le",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.s390x",
            "AppStream-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.x86_64",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.aarch64",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.i686",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.ppc64le",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.s390x",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.src",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.x86_64",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.aarch64",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.i686",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.ppc64le",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.s390x",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.x86_64",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.aarch64",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.i686",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.ppc64le",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.s390x",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.x86_64",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.aarch64",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.i686",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.ppc64le",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.s390x",
            "AppStream-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.aarch64",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.i686",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.s390x",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.5.3-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.aarch64",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.i686",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.s390x",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.5.3-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.aarch64",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.s390x",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-0:3.5.3-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.aarch64",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.i686",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.s390x",
            "BaseOS-9.6.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.5.3-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.aarch64",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.i686",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.s390x",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.src",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-0:3.5.3-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.aarch64",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.i686",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.s390x",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.5.3-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.aarch64",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.i686",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.s390x",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-debugsource-0:3.5.3-6.el9_6.x86_64",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.aarch64",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.i686",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.ppc64le",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.s390x",
            "BaseOS-9.6.0.Z.MAIN.EUS:libarchive-devel-0:3.5.3-6.el9_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c"
    }
  ]
}

RHSA-2025:14135

Vulnerability from csaf_redhat - Published: 2025-08-20 08:16 - Updated: 2026-06-05 00:24

Summary

Red Hat Security Advisory: libarchive security update

Severity

Important

Notes

Topic: An update for libarchive is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

CVE-2025-5914

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 80 products

Product	Version	Remediation
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.src	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.i686	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.i686	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.i686	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.i686	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.src	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.i686	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.i686	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.i686	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.s390x	—	Vendor Fix fix
Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.x86_64	—	Vendor Fix fix

Threats

Impact Important

References

10 references

URL	Category
https://access.redhat.com/errata/RHSA-2025:14135	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2370861	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-5914	self
https://bugzilla.redhat.com/show_bug.cgi?id=2370861	external
https://www.cve.org/CVERecord?id=CVE-2025-5914	external
https://nvd.nist.gov/vuln/detail/CVE-2025-5914	external
https://github.com/libarchive/libarchive/pull/2598	external
https://github.com/libarchive/libarchive/releases…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libarchive is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.\n\nSecurity Fix(es):\n\n* libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c (CVE-2025-5914)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:14135",
        "url": "https://access.redhat.com/errata/RHSA-2025:14135"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2370861",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14135.json"
      }
    ],
    "title": "Red Hat Security Advisory: libarchive security update",
    "tracking": {
      "current_release_date": "2026-06-05T00:24:47+00:00",
      "generator": {
        "date": "2026-06-05T00:24:47+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2025:14135",
      "initial_release_date": "2025-08-20T08:16:44+00:00",
      "revision_history": [
        {
          "date": "2025-08-20T08:16:44+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-20T08:16:44+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-05T00:24:47+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS (v. 8)",
                  "product_id": "BaseOS-8.10.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux CRB (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux CRB (v. 8)",
                  "product_id": "CRB-8.10.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bsdtar-0:3.3.3-6.el8_10.aarch64",
                "product": {
                  "name": "bsdtar-0:3.3.3-6.el8_10.aarch64",
                  "product_id": "bsdtar-0:3.3.3-6.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.3.3-6.el8_10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-0:3.3.3-6.el8_10.aarch64",
                "product": {
                  "name": "libarchive-0:3.3.3-6.el8_10.aarch64",
                  "product_id": "libarchive-0:3.3.3-6.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.3.3-6.el8_10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.3.3-6.el8_10.aarch64",
                "product": {
                  "name": "libarchive-debugsource-0:3.3.3-6.el8_10.aarch64",
                  "product_id": "libarchive-debugsource-0:3.3.3-6.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.3.3-6.el8_10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.aarch64",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.aarch64",
                  "product_id": "bsdcat-debuginfo-0:3.3.3-6.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.3.3-6.el8_10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.aarch64",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.aarch64",
                  "product_id": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.3.3-6.el8_10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.aarch64",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.aarch64",
                  "product_id": "bsdtar-debuginfo-0:3.3.3-6.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.3.3-6.el8_10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.aarch64",
                "product": {
                  "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.aarch64",
                  "product_id": "libarchive-debuginfo-0:3.3.3-6.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.3.3-6.el8_10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.3.3-6.el8_10.aarch64",
                "product": {
                  "name": "libarchive-devel-0:3.3.3-6.el8_10.aarch64",
                  "product_id": "libarchive-devel-0:3.3.3-6.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.3.3-6.el8_10?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bsdtar-0:3.3.3-6.el8_10.ppc64le",
                "product": {
                  "name": "bsdtar-0:3.3.3-6.el8_10.ppc64le",
                  "product_id": "bsdtar-0:3.3.3-6.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.3.3-6.el8_10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-0:3.3.3-6.el8_10.ppc64le",
                "product": {
                  "name": "libarchive-0:3.3.3-6.el8_10.ppc64le",
                  "product_id": "libarchive-0:3.3.3-6.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.3.3-6.el8_10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.3.3-6.el8_10.ppc64le",
                "product": {
                  "name": "libarchive-debugsource-0:3.3.3-6.el8_10.ppc64le",
                  "product_id": "libarchive-debugsource-0:3.3.3-6.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.3.3-6.el8_10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.ppc64le",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.ppc64le",
                  "product_id": "bsdcat-debuginfo-0:3.3.3-6.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.3.3-6.el8_10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.ppc64le",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.ppc64le",
                  "product_id": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.3.3-6.el8_10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.ppc64le",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.ppc64le",
                  "product_id": "bsdtar-debuginfo-0:3.3.3-6.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.3.3-6.el8_10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.ppc64le",
                "product": {
                  "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.ppc64le",
                  "product_id": "libarchive-debuginfo-0:3.3.3-6.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.3.3-6.el8_10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.3.3-6.el8_10.ppc64le",
                "product": {
                  "name": "libarchive-devel-0:3.3.3-6.el8_10.ppc64le",
                  "product_id": "libarchive-devel-0:3.3.3-6.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.3.3-6.el8_10?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bsdtar-0:3.3.3-6.el8_10.x86_64",
                "product": {
                  "name": "bsdtar-0:3.3.3-6.el8_10.x86_64",
                  "product_id": "bsdtar-0:3.3.3-6.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.3.3-6.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-0:3.3.3-6.el8_10.x86_64",
                "product": {
                  "name": "libarchive-0:3.3.3-6.el8_10.x86_64",
                  "product_id": "libarchive-0:3.3.3-6.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.3.3-6.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.3.3-6.el8_10.x86_64",
                "product": {
                  "name": "libarchive-debugsource-0:3.3.3-6.el8_10.x86_64",
                  "product_id": "libarchive-debugsource-0:3.3.3-6.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.3.3-6.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.x86_64",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.x86_64",
                  "product_id": "bsdcat-debuginfo-0:3.3.3-6.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.3.3-6.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.x86_64",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.x86_64",
                  "product_id": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.3.3-6.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.x86_64",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.x86_64",
                  "product_id": "bsdtar-debuginfo-0:3.3.3-6.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.3.3-6.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.x86_64",
                "product": {
                  "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.x86_64",
                  "product_id": "libarchive-debuginfo-0:3.3.3-6.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.3.3-6.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.3.3-6.el8_10.x86_64",
                "product": {
                  "name": "libarchive-devel-0:3.3.3-6.el8_10.x86_64",
                  "product_id": "libarchive-devel-0:3.3.3-6.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.3.3-6.el8_10?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.3.3-6.el8_10.i686",
                "product": {
                  "name": "libarchive-0:3.3.3-6.el8_10.i686",
                  "product_id": "libarchive-0:3.3.3-6.el8_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.3.3-6.el8_10?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.3.3-6.el8_10.i686",
                "product": {
                  "name": "libarchive-debugsource-0:3.3.3-6.el8_10.i686",
                  "product_id": "libarchive-debugsource-0:3.3.3-6.el8_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.3.3-6.el8_10?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.i686",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.i686",
                  "product_id": "bsdcat-debuginfo-0:3.3.3-6.el8_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.3.3-6.el8_10?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.i686",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.i686",
                  "product_id": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.3.3-6.el8_10?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.i686",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.i686",
                  "product_id": "bsdtar-debuginfo-0:3.3.3-6.el8_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.3.3-6.el8_10?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.i686",
                "product": {
                  "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.i686",
                  "product_id": "libarchive-debuginfo-0:3.3.3-6.el8_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.3.3-6.el8_10?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.3.3-6.el8_10.i686",
                "product": {
                  "name": "libarchive-devel-0:3.3.3-6.el8_10.i686",
                  "product_id": "libarchive-devel-0:3.3.3-6.el8_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.3.3-6.el8_10?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bsdtar-0:3.3.3-6.el8_10.s390x",
                "product": {
                  "name": "bsdtar-0:3.3.3-6.el8_10.s390x",
                  "product_id": "bsdtar-0:3.3.3-6.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.3.3-6.el8_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-0:3.3.3-6.el8_10.s390x",
                "product": {
                  "name": "libarchive-0:3.3.3-6.el8_10.s390x",
                  "product_id": "libarchive-0:3.3.3-6.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.3.3-6.el8_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.3.3-6.el8_10.s390x",
                "product": {
                  "name": "libarchive-debugsource-0:3.3.3-6.el8_10.s390x",
                  "product_id": "libarchive-debugsource-0:3.3.3-6.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.3.3-6.el8_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.s390x",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.s390x",
                  "product_id": "bsdcat-debuginfo-0:3.3.3-6.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.3.3-6.el8_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.s390x",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.s390x",
                  "product_id": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.3.3-6.el8_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.s390x",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.s390x",
                  "product_id": "bsdtar-debuginfo-0:3.3.3-6.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.3.3-6.el8_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.s390x",
                "product": {
                  "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.s390x",
                  "product_id": "libarchive-debuginfo-0:3.3.3-6.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.3.3-6.el8_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.3.3-6.el8_10.s390x",
                "product": {
                  "name": "libarchive-devel-0:3.3.3-6.el8_10.s390x",
                  "product_id": "libarchive-devel-0:3.3.3-6.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.3.3-6.el8_10?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.3.3-6.el8_10.src",
                "product": {
                  "name": "libarchive-0:3.3.3-6.el8_10.src",
                  "product_id": "libarchive-0:3.3.3-6.el8_10.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.3.3-6.el8_10?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.aarch64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.3.3-6.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.i686"
        },
        "product_reference": "bsdcat-debuginfo-0:3.3.3-6.el8_10.i686",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.ppc64le"
        },
        "product_reference": "bsdcat-debuginfo-0:3.3.3-6.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.s390x"
        },
        "product_reference": "bsdcat-debuginfo-0:3.3.3-6.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.x86_64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.3.3-6.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.aarch64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.i686"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.i686",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.ppc64le"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.s390x"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.x86_64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.3.3-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.aarch64"
        },
        "product_reference": "bsdtar-0:3.3.3-6.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.3.3-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.ppc64le"
        },
        "product_reference": "bsdtar-0:3.3.3-6.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.3.3-6.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.s390x"
        },
        "product_reference": "bsdtar-0:3.3.3-6.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.3.3-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.x86_64"
        },
        "product_reference": "bsdtar-0:3.3.3-6.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.aarch64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.3.3-6.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.i686"
        },
        "product_reference": "bsdtar-debuginfo-0:3.3.3-6.el8_10.i686",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.ppc64le"
        },
        "product_reference": "bsdtar-debuginfo-0:3.3.3-6.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.s390x"
        },
        "product_reference": "bsdtar-debuginfo-0:3.3.3-6.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.x86_64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.3.3-6.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.aarch64"
        },
        "product_reference": "libarchive-0:3.3.3-6.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-6.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.i686"
        },
        "product_reference": "libarchive-0:3.3.3-6.el8_10.i686",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.ppc64le"
        },
        "product_reference": "libarchive-0:3.3.3-6.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-6.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.s390x"
        },
        "product_reference": "libarchive-0:3.3.3-6.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-6.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.src"
        },
        "product_reference": "libarchive-0:3.3.3-6.el8_10.src",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.x86_64"
        },
        "product_reference": "libarchive-0:3.3.3-6.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.aarch64"
        },
        "product_reference": "libarchive-debuginfo-0:3.3.3-6.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.i686"
        },
        "product_reference": "libarchive-debuginfo-0:3.3.3-6.el8_10.i686",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.ppc64le"
        },
        "product_reference": "libarchive-debuginfo-0:3.3.3-6.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.s390x"
        },
        "product_reference": "libarchive-debuginfo-0:3.3.3-6.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.x86_64"
        },
        "product_reference": "libarchive-debuginfo-0:3.3.3-6.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.3.3-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.aarch64"
        },
        "product_reference": "libarchive-debugsource-0:3.3.3-6.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.3.3-6.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.i686"
        },
        "product_reference": "libarchive-debugsource-0:3.3.3-6.el8_10.i686",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.3.3-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.ppc64le"
        },
        "product_reference": "libarchive-debugsource-0:3.3.3-6.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.3.3-6.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.s390x"
        },
        "product_reference": "libarchive-debugsource-0:3.3.3-6.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.3.3-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.x86_64"
        },
        "product_reference": "libarchive-debugsource-0:3.3.3-6.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.3.3-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.aarch64"
        },
        "product_reference": "libarchive-devel-0:3.3.3-6.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.3.3-6.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.i686"
        },
        "product_reference": "libarchive-devel-0:3.3.3-6.el8_10.i686",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.3.3-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.ppc64le"
        },
        "product_reference": "libarchive-devel-0:3.3.3-6.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.3.3-6.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.s390x"
        },
        "product_reference": "libarchive-devel-0:3.3.3-6.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.3.3-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.x86_64"
        },
        "product_reference": "libarchive-devel-0:3.3.3-6.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.aarch64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.3.3-6.el8_10.aarch64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.i686"
        },
        "product_reference": "bsdcat-debuginfo-0:3.3.3-6.el8_10.i686",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.ppc64le"
        },
        "product_reference": "bsdcat-debuginfo-0:3.3.3-6.el8_10.ppc64le",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.s390x"
        },
        "product_reference": "bsdcat-debuginfo-0:3.3.3-6.el8_10.s390x",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.3.3-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.x86_64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.3.3-6.el8_10.x86_64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.aarch64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.aarch64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.i686"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.i686",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.ppc64le"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.ppc64le",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.s390x"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.s390x",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.x86_64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.3.3-6.el8_10.x86_64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.3.3-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.aarch64"
        },
        "product_reference": "bsdtar-0:3.3.3-6.el8_10.aarch64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.3.3-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.ppc64le"
        },
        "product_reference": "bsdtar-0:3.3.3-6.el8_10.ppc64le",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.3.3-6.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.s390x"
        },
        "product_reference": "bsdtar-0:3.3.3-6.el8_10.s390x",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.3.3-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.x86_64"
        },
        "product_reference": "bsdtar-0:3.3.3-6.el8_10.x86_64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.aarch64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.3.3-6.el8_10.aarch64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.i686"
        },
        "product_reference": "bsdtar-debuginfo-0:3.3.3-6.el8_10.i686",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.ppc64le"
        },
        "product_reference": "bsdtar-debuginfo-0:3.3.3-6.el8_10.ppc64le",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.s390x"
        },
        "product_reference": "bsdtar-debuginfo-0:3.3.3-6.el8_10.s390x",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.3.3-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.x86_64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.3.3-6.el8_10.x86_64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.aarch64"
        },
        "product_reference": "libarchive-0:3.3.3-6.el8_10.aarch64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-6.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.i686"
        },
        "product_reference": "libarchive-0:3.3.3-6.el8_10.i686",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.ppc64le"
        },
        "product_reference": "libarchive-0:3.3.3-6.el8_10.ppc64le",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-6.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.s390x"
        },
        "product_reference": "libarchive-0:3.3.3-6.el8_10.s390x",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-6.el8_10.src as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.src"
        },
        "product_reference": "libarchive-0:3.3.3-6.el8_10.src",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.x86_64"
        },
        "product_reference": "libarchive-0:3.3.3-6.el8_10.x86_64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.aarch64"
        },
        "product_reference": "libarchive-debuginfo-0:3.3.3-6.el8_10.aarch64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.i686"
        },
        "product_reference": "libarchive-debuginfo-0:3.3.3-6.el8_10.i686",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.ppc64le"
        },
        "product_reference": "libarchive-debuginfo-0:3.3.3-6.el8_10.ppc64le",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.s390x"
        },
        "product_reference": "libarchive-debuginfo-0:3.3.3-6.el8_10.s390x",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.3.3-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.x86_64"
        },
        "product_reference": "libarchive-debuginfo-0:3.3.3-6.el8_10.x86_64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.3.3-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.aarch64"
        },
        "product_reference": "libarchive-debugsource-0:3.3.3-6.el8_10.aarch64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.3.3-6.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.i686"
        },
        "product_reference": "libarchive-debugsource-0:3.3.3-6.el8_10.i686",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.3.3-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.ppc64le"
        },
        "product_reference": "libarchive-debugsource-0:3.3.3-6.el8_10.ppc64le",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.3.3-6.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.s390x"
        },
        "product_reference": "libarchive-debugsource-0:3.3.3-6.el8_10.s390x",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.3.3-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.x86_64"
        },
        "product_reference": "libarchive-debugsource-0:3.3.3-6.el8_10.x86_64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.3.3-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.aarch64"
        },
        "product_reference": "libarchive-devel-0:3.3.3-6.el8_10.aarch64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.3.3-6.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.i686"
        },
        "product_reference": "libarchive-devel-0:3.3.3-6.el8_10.i686",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.3.3-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.ppc64le"
        },
        "product_reference": "libarchive-devel-0:3.3.3-6.el8_10.ppc64le",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.3.3-6.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.s390x"
        },
        "product_reference": "libarchive-devel-0:3.3.3-6.el8_10.s390x",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.3.3-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
          "product_id": "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.x86_64"
        },
        "product_reference": "libarchive-devel-0:3.3.3-6.el8_10.x86_64",
        "relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-5914",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2025-06-06T17:58:25.491000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2370861"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has rated this vulnerability as Important because it allows a local attacker with limited privileges to trigger a double-free in libarchive\u0027s RAR parser by providing a specially crafted RAR archive. Successful exploitation could result in code execution or application crashes.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.i686",
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.i686",
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.i686",
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.i686",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.src",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.i686",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.i686",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.i686",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.x86_64",
          "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.aarch64",
          "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.i686",
          "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.ppc64le",
          "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.s390x",
          "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.x86_64",
          "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.aarch64",
          "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.i686",
          "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.ppc64le",
          "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.s390x",
          "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.x86_64",
          "CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.aarch64",
          "CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.ppc64le",
          "CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.s390x",
          "CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.x86_64",
          "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.aarch64",
          "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.i686",
          "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.ppc64le",
          "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.s390x",
          "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.x86_64",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.aarch64",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.i686",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.ppc64le",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.s390x",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.src",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.x86_64",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.aarch64",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.i686",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.ppc64le",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.s390x",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.x86_64",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.aarch64",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.i686",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.ppc64le",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.s390x",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.x86_64",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.aarch64",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.i686",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.ppc64le",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.s390x",
          "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "RHBZ#2370861",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-5914",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5914",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "https://github.com/libarchive/libarchive/pull/2598",
          "url": "https://github.com/libarchive/libarchive/pull/2598"
        },
        {
          "category": "external",
          "summary": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0",
          "url": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0"
        }
      ],
      "release_date": "2025-05-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-20T08:16:44+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.i686",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.i686",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.i686",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.i686",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.i686",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.i686",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.i686",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.src",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:14135"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.i686",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.i686",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.i686",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.i686",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.i686",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.i686",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.i686",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcat-debuginfo-0:3.3.3-6.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:bsdcpio-debuginfo-0:3.3.3-6.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:bsdtar-0:3.3.3-6.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:bsdtar-debuginfo-0:3.3.3-6.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.src",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-0:3.3.3-6.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debuginfo-0:3.3.3-6.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-debugsource-0:3.3.3-6.el8_10.x86_64",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.aarch64",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.i686",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.ppc64le",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.s390x",
            "CRB-8.10.0.Z.MAIN.EUS:libarchive-devel-0:3.3.3-6.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c"
    }
  ]
}

RHSA-2025:14137

Vulnerability from csaf_redhat - Published: 2025-08-20 08:29 - Updated: 2026-06-05 00:24

Summary

Red Hat Security Advisory: libarchive security update

Severity

Important

Notes

Topic: An update for libarchive is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

CVE-2025-5914

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 74 products

Product	Version	Remediation
Unresolved product id: AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.src	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.src	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.x86_64	—	Vendor Fix fix

Threats

Impact Important

References

10 references

URL	Category
https://access.redhat.com/errata/RHSA-2025:14137	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2370861	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-5914	self
https://bugzilla.redhat.com/show_bug.cgi?id=2370861	external
https://www.cve.org/CVERecord?id=CVE-2025-5914	external
https://nvd.nist.gov/vuln/detail/CVE-2025-5914	external
https://github.com/libarchive/libarchive/pull/2598	external
https://github.com/libarchive/libarchive/releases…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libarchive is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.\n\nSecurity Fix(es):\n\n* libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c (CVE-2025-5914)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:14137",
        "url": "https://access.redhat.com/errata/RHSA-2025:14137"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2370861",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14137.json"
      }
    ],
    "title": "Red Hat Security Advisory: libarchive security update",
    "tracking": {
      "current_release_date": "2026-06-05T00:24:48+00:00",
      "generator": {
        "date": "2026-06-05T00:24:48+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2025:14137",
      "initial_release_date": "2025-08-20T08:29:24+00:00",
      "revision_history": [
        {
          "date": "2025-08-20T08:29:24+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-20T08:29:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-05T00:24:48+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                  "product_id": "AppStream-10.0.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.0"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS (v. 10)",
                  "product_id": "BaseOS-10.0.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.7.7-4.el10_0.src",
                "product": {
                  "name": "libarchive-0:3.7.7-4.el10_0.src",
                  "product_id": "libarchive-0:3.7.7-4.el10_0.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.7.7-4.el10_0?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.7.7-4.el10_0.aarch64",
                "product": {
                  "name": "libarchive-0:3.7.7-4.el10_0.aarch64",
                  "product_id": "libarchive-0:3.7.7-4.el10_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.7.7-4.el10_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.7.7-4.el10_0.aarch64",
                "product": {
                  "name": "libarchive-debugsource-0:3.7.7-4.el10_0.aarch64",
                  "product_id": "libarchive-debugsource-0:3.7.7-4.el10_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.7.7-4.el10_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.7.7-4.el10_0.aarch64",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.7.7-4.el10_0.aarch64",
                  "product_id": "bsdcat-debuginfo-0:3.7.7-4.el10_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.7.7-4.el10_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.aarch64",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.aarch64",
                  "product_id": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.7.7-4.el10_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.7.7-4.el10_0.aarch64",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.7.7-4.el10_0.aarch64",
                  "product_id": "bsdtar-debuginfo-0:3.7.7-4.el10_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.7.7-4.el10_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.aarch64",
                "product": {
                  "name": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.aarch64",
                  "product_id": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdunzip-debuginfo@3.7.7-4.el10_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.7.7-4.el10_0.aarch64",
                "product": {
                  "name": "libarchive-debuginfo-0:3.7.7-4.el10_0.aarch64",
                  "product_id": "libarchive-debuginfo-0:3.7.7-4.el10_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.7.7-4.el10_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-0:3.7.7-4.el10_0.aarch64",
                "product": {
                  "name": "bsdtar-0:3.7.7-4.el10_0.aarch64",
                  "product_id": "bsdtar-0:3.7.7-4.el10_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.7.7-4.el10_0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.7.7-4.el10_0.aarch64",
                "product": {
                  "name": "libarchive-devel-0:3.7.7-4.el10_0.aarch64",
                  "product_id": "libarchive-devel-0:3.7.7-4.el10_0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.7.7-4.el10_0?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.7.7-4.el10_0.ppc64le",
                "product": {
                  "name": "libarchive-0:3.7.7-4.el10_0.ppc64le",
                  "product_id": "libarchive-0:3.7.7-4.el10_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.7.7-4.el10_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.7.7-4.el10_0.ppc64le",
                "product": {
                  "name": "libarchive-debugsource-0:3.7.7-4.el10_0.ppc64le",
                  "product_id": "libarchive-debugsource-0:3.7.7-4.el10_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.7.7-4.el10_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.7.7-4.el10_0.ppc64le",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.7.7-4.el10_0.ppc64le",
                  "product_id": "bsdcat-debuginfo-0:3.7.7-4.el10_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.7.7-4.el10_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.ppc64le",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.ppc64le",
                  "product_id": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.7.7-4.el10_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.7.7-4.el10_0.ppc64le",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.7.7-4.el10_0.ppc64le",
                  "product_id": "bsdtar-debuginfo-0:3.7.7-4.el10_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.7.7-4.el10_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.ppc64le",
                "product": {
                  "name": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.ppc64le",
                  "product_id": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdunzip-debuginfo@3.7.7-4.el10_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.7.7-4.el10_0.ppc64le",
                "product": {
                  "name": "libarchive-debuginfo-0:3.7.7-4.el10_0.ppc64le",
                  "product_id": "libarchive-debuginfo-0:3.7.7-4.el10_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.7.7-4.el10_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-0:3.7.7-4.el10_0.ppc64le",
                "product": {
                  "name": "bsdtar-0:3.7.7-4.el10_0.ppc64le",
                  "product_id": "bsdtar-0:3.7.7-4.el10_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.7.7-4.el10_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.7.7-4.el10_0.ppc64le",
                "product": {
                  "name": "libarchive-devel-0:3.7.7-4.el10_0.ppc64le",
                  "product_id": "libarchive-devel-0:3.7.7-4.el10_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.7.7-4.el10_0?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.7.7-4.el10_0.x86_64",
                "product": {
                  "name": "libarchive-0:3.7.7-4.el10_0.x86_64",
                  "product_id": "libarchive-0:3.7.7-4.el10_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.7.7-4.el10_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.7.7-4.el10_0.x86_64",
                "product": {
                  "name": "libarchive-debugsource-0:3.7.7-4.el10_0.x86_64",
                  "product_id": "libarchive-debugsource-0:3.7.7-4.el10_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.7.7-4.el10_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.7.7-4.el10_0.x86_64",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.7.7-4.el10_0.x86_64",
                  "product_id": "bsdcat-debuginfo-0:3.7.7-4.el10_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.7.7-4.el10_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.x86_64",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.x86_64",
                  "product_id": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.7.7-4.el10_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.7.7-4.el10_0.x86_64",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.7.7-4.el10_0.x86_64",
                  "product_id": "bsdtar-debuginfo-0:3.7.7-4.el10_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.7.7-4.el10_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.x86_64",
                "product": {
                  "name": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.x86_64",
                  "product_id": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdunzip-debuginfo@3.7.7-4.el10_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.7.7-4.el10_0.x86_64",
                "product": {
                  "name": "libarchive-debuginfo-0:3.7.7-4.el10_0.x86_64",
                  "product_id": "libarchive-debuginfo-0:3.7.7-4.el10_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.7.7-4.el10_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-0:3.7.7-4.el10_0.x86_64",
                "product": {
                  "name": "bsdtar-0:3.7.7-4.el10_0.x86_64",
                  "product_id": "bsdtar-0:3.7.7-4.el10_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.7.7-4.el10_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.7.7-4.el10_0.x86_64",
                "product": {
                  "name": "libarchive-devel-0:3.7.7-4.el10_0.x86_64",
                  "product_id": "libarchive-devel-0:3.7.7-4.el10_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.7.7-4.el10_0?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.7.7-4.el10_0.s390x",
                "product": {
                  "name": "libarchive-0:3.7.7-4.el10_0.s390x",
                  "product_id": "libarchive-0:3.7.7-4.el10_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.7.7-4.el10_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.7.7-4.el10_0.s390x",
                "product": {
                  "name": "libarchive-debugsource-0:3.7.7-4.el10_0.s390x",
                  "product_id": "libarchive-debugsource-0:3.7.7-4.el10_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.7.7-4.el10_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.7.7-4.el10_0.s390x",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.7.7-4.el10_0.s390x",
                  "product_id": "bsdcat-debuginfo-0:3.7.7-4.el10_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.7.7-4.el10_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.s390x",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.s390x",
                  "product_id": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.7.7-4.el10_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.7.7-4.el10_0.s390x",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.7.7-4.el10_0.s390x",
                  "product_id": "bsdtar-debuginfo-0:3.7.7-4.el10_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.7.7-4.el10_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.s390x",
                "product": {
                  "name": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.s390x",
                  "product_id": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdunzip-debuginfo@3.7.7-4.el10_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.7.7-4.el10_0.s390x",
                "product": {
                  "name": "libarchive-debuginfo-0:3.7.7-4.el10_0.s390x",
                  "product_id": "libarchive-debuginfo-0:3.7.7-4.el10_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.7.7-4.el10_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-0:3.7.7-4.el10_0.s390x",
                "product": {
                  "name": "bsdtar-0:3.7.7-4.el10_0.s390x",
                  "product_id": "bsdtar-0:3.7.7-4.el10_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.7.7-4.el10_0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.7.7-4.el10_0.s390x",
                "product": {
                  "name": "libarchive-devel-0:3.7.7-4.el10_0.s390x",
                  "product_id": "libarchive-devel-0:3.7.7-4.el10_0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.7.7-4.el10_0?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.7.7-4.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.aarch64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.7.7-4.el10_0.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.7.7-4.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.ppc64le"
        },
        "product_reference": "bsdcat-debuginfo-0:3.7.7-4.el10_0.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.7.7-4.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.s390x"
        },
        "product_reference": "bsdcat-debuginfo-0:3.7.7-4.el10_0.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.7.7-4.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.x86_64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.7.7-4.el10_0.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.aarch64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.ppc64le"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.s390x"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.x86_64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.7.7-4.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.aarch64"
        },
        "product_reference": "bsdtar-0:3.7.7-4.el10_0.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.7.7-4.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.ppc64le"
        },
        "product_reference": "bsdtar-0:3.7.7-4.el10_0.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.7.7-4.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.s390x"
        },
        "product_reference": "bsdtar-0:3.7.7-4.el10_0.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.7.7-4.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.x86_64"
        },
        "product_reference": "bsdtar-0:3.7.7-4.el10_0.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.7.7-4.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.aarch64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.7.7-4.el10_0.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.7.7-4.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.ppc64le"
        },
        "product_reference": "bsdtar-debuginfo-0:3.7.7-4.el10_0.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.7.7-4.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.s390x"
        },
        "product_reference": "bsdtar-debuginfo-0:3.7.7-4.el10_0.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.7.7-4.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.x86_64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.7.7-4.el10_0.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.aarch64"
        },
        "product_reference": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.ppc64le"
        },
        "product_reference": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.s390x"
        },
        "product_reference": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.x86_64"
        },
        "product_reference": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.7.7-4.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.aarch64"
        },
        "product_reference": "libarchive-0:3.7.7-4.el10_0.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.7.7-4.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.ppc64le"
        },
        "product_reference": "libarchive-0:3.7.7-4.el10_0.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.7.7-4.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.s390x"
        },
        "product_reference": "libarchive-0:3.7.7-4.el10_0.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.7.7-4.el10_0.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.src"
        },
        "product_reference": "libarchive-0:3.7.7-4.el10_0.src",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.7.7-4.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.x86_64"
        },
        "product_reference": "libarchive-0:3.7.7-4.el10_0.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.7.7-4.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.aarch64"
        },
        "product_reference": "libarchive-debuginfo-0:3.7.7-4.el10_0.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.7.7-4.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.ppc64le"
        },
        "product_reference": "libarchive-debuginfo-0:3.7.7-4.el10_0.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.7.7-4.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.s390x"
        },
        "product_reference": "libarchive-debuginfo-0:3.7.7-4.el10_0.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.7.7-4.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.x86_64"
        },
        "product_reference": "libarchive-debuginfo-0:3.7.7-4.el10_0.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.7.7-4.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.aarch64"
        },
        "product_reference": "libarchive-debugsource-0:3.7.7-4.el10_0.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.7.7-4.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.ppc64le"
        },
        "product_reference": "libarchive-debugsource-0:3.7.7-4.el10_0.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.7.7-4.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.s390x"
        },
        "product_reference": "libarchive-debugsource-0:3.7.7-4.el10_0.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.7.7-4.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.x86_64"
        },
        "product_reference": "libarchive-debugsource-0:3.7.7-4.el10_0.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.7.7-4.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.aarch64"
        },
        "product_reference": "libarchive-devel-0:3.7.7-4.el10_0.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.7.7-4.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.ppc64le"
        },
        "product_reference": "libarchive-devel-0:3.7.7-4.el10_0.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.7.7-4.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.s390x"
        },
        "product_reference": "libarchive-devel-0:3.7.7-4.el10_0.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.7.7-4.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.x86_64"
        },
        "product_reference": "libarchive-devel-0:3.7.7-4.el10_0.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.7.7-4.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.aarch64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.7.7-4.el10_0.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.7.7-4.el10_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.ppc64le"
        },
        "product_reference": "bsdcat-debuginfo-0:3.7.7-4.el10_0.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.7.7-4.el10_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.s390x"
        },
        "product_reference": "bsdcat-debuginfo-0:3.7.7-4.el10_0.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.7.7-4.el10_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.x86_64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.7.7-4.el10_0.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.aarch64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.ppc64le"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.s390x"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.x86_64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.7.7-4.el10_0.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.7.7-4.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.aarch64"
        },
        "product_reference": "bsdtar-0:3.7.7-4.el10_0.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.7.7-4.el10_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.ppc64le"
        },
        "product_reference": "bsdtar-0:3.7.7-4.el10_0.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.7.7-4.el10_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.s390x"
        },
        "product_reference": "bsdtar-0:3.7.7-4.el10_0.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.7.7-4.el10_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.x86_64"
        },
        "product_reference": "bsdtar-0:3.7.7-4.el10_0.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.7.7-4.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.aarch64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.7.7-4.el10_0.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.7.7-4.el10_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.ppc64le"
        },
        "product_reference": "bsdtar-debuginfo-0:3.7.7-4.el10_0.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.7.7-4.el10_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.s390x"
        },
        "product_reference": "bsdtar-debuginfo-0:3.7.7-4.el10_0.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.7.7-4.el10_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.x86_64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.7.7-4.el10_0.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.aarch64"
        },
        "product_reference": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.ppc64le"
        },
        "product_reference": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.s390x"
        },
        "product_reference": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.x86_64"
        },
        "product_reference": "bsdunzip-debuginfo-0:3.7.7-4.el10_0.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.7.7-4.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.aarch64"
        },
        "product_reference": "libarchive-0:3.7.7-4.el10_0.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.7.7-4.el10_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.ppc64le"
        },
        "product_reference": "libarchive-0:3.7.7-4.el10_0.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.7.7-4.el10_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.s390x"
        },
        "product_reference": "libarchive-0:3.7.7-4.el10_0.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.7.7-4.el10_0.src as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.src"
        },
        "product_reference": "libarchive-0:3.7.7-4.el10_0.src",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.7.7-4.el10_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.x86_64"
        },
        "product_reference": "libarchive-0:3.7.7-4.el10_0.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.7.7-4.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.aarch64"
        },
        "product_reference": "libarchive-debuginfo-0:3.7.7-4.el10_0.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.7.7-4.el10_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.ppc64le"
        },
        "product_reference": "libarchive-debuginfo-0:3.7.7-4.el10_0.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.7.7-4.el10_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.s390x"
        },
        "product_reference": "libarchive-debuginfo-0:3.7.7-4.el10_0.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.7.7-4.el10_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.x86_64"
        },
        "product_reference": "libarchive-debuginfo-0:3.7.7-4.el10_0.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.7.7-4.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.aarch64"
        },
        "product_reference": "libarchive-debugsource-0:3.7.7-4.el10_0.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.7.7-4.el10_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.ppc64le"
        },
        "product_reference": "libarchive-debugsource-0:3.7.7-4.el10_0.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.7.7-4.el10_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.s390x"
        },
        "product_reference": "libarchive-debugsource-0:3.7.7-4.el10_0.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.7.7-4.el10_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.x86_64"
        },
        "product_reference": "libarchive-debugsource-0:3.7.7-4.el10_0.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.7.7-4.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.aarch64"
        },
        "product_reference": "libarchive-devel-0:3.7.7-4.el10_0.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.7.7-4.el10_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.ppc64le"
        },
        "product_reference": "libarchive-devel-0:3.7.7-4.el10_0.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.7.7-4.el10_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.s390x"
        },
        "product_reference": "libarchive-devel-0:3.7.7-4.el10_0.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.7.7-4.el10_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.x86_64"
        },
        "product_reference": "libarchive-devel-0:3.7.7-4.el10_0.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-5914",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2025-06-06T17:58:25.491000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2370861"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has rated this vulnerability as Important because it allows a local attacker with limited privileges to trigger a double-free in libarchive\u0027s RAR parser by providing a specially crafted RAR archive. Successful exploitation could result in code execution or application crashes.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.aarch64",
          "AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.ppc64le",
          "AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.s390x",
          "AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.x86_64",
          "AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.aarch64",
          "AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.ppc64le",
          "AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.s390x",
          "AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.x86_64",
          "AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.aarch64",
          "AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.ppc64le",
          "AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.s390x",
          "AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.x86_64",
          "AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.aarch64",
          "AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.ppc64le",
          "AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.s390x",
          "AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.x86_64",
          "AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.aarch64",
          "AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.ppc64le",
          "AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.s390x",
          "AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.x86_64",
          "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.aarch64",
          "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.ppc64le",
          "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.s390x",
          "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.src",
          "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.x86_64",
          "AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.aarch64",
          "AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.ppc64le",
          "AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.s390x",
          "AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.x86_64",
          "AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.aarch64",
          "AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.ppc64le",
          "AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.s390x",
          "AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.x86_64",
          "AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.aarch64",
          "AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.ppc64le",
          "AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.s390x",
          "AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.x86_64",
          "BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.aarch64",
          "BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.ppc64le",
          "BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.s390x",
          "BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.x86_64",
          "BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.aarch64",
          "BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.ppc64le",
          "BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.s390x",
          "BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.x86_64",
          "BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.aarch64",
          "BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.ppc64le",
          "BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.s390x",
          "BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.x86_64",
          "BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.aarch64",
          "BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.ppc64le",
          "BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.s390x",
          "BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.x86_64",
          "BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.aarch64",
          "BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.ppc64le",
          "BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.s390x",
          "BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.x86_64",
          "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.aarch64",
          "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.ppc64le",
          "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.s390x",
          "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.src",
          "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.x86_64",
          "BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.aarch64",
          "BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.ppc64le",
          "BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.s390x",
          "BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.x86_64",
          "BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.aarch64",
          "BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.ppc64le",
          "BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.s390x",
          "BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.x86_64",
          "BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.aarch64",
          "BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.ppc64le",
          "BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.s390x",
          "BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "RHBZ#2370861",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-5914",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5914",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "https://github.com/libarchive/libarchive/pull/2598",
          "url": "https://github.com/libarchive/libarchive/pull/2598"
        },
        {
          "category": "external",
          "summary": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0",
          "url": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0"
        }
      ],
      "release_date": "2025-05-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-20T08:29:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.s390x",
            "AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.s390x",
            "AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.aarch64",
            "AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.ppc64le",
            "AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.s390x",
            "AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.x86_64",
            "AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.s390x",
            "AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.s390x",
            "AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.aarch64",
            "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.ppc64le",
            "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.s390x",
            "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.src",
            "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.x86_64",
            "AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.s390x",
            "AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.aarch64",
            "AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.ppc64le",
            "AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.s390x",
            "AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.x86_64",
            "AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.aarch64",
            "AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.ppc64le",
            "AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.s390x",
            "AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.x86_64",
            "BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.s390x",
            "BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.s390x",
            "BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.aarch64",
            "BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.ppc64le",
            "BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.s390x",
            "BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.x86_64",
            "BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.s390x",
            "BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.s390x",
            "BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.aarch64",
            "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.ppc64le",
            "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.s390x",
            "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.src",
            "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.x86_64",
            "BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.s390x",
            "BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.aarch64",
            "BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.ppc64le",
            "BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.s390x",
            "BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.x86_64",
            "BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.aarch64",
            "BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.ppc64le",
            "BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.s390x",
            "BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:14137"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.s390x",
            "AppStream-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.s390x",
            "AppStream-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.aarch64",
            "AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.ppc64le",
            "AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.s390x",
            "AppStream-10.0.Z:bsdtar-0:3.7.7-4.el10_0.x86_64",
            "AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.s390x",
            "AppStream-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.s390x",
            "AppStream-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.aarch64",
            "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.ppc64le",
            "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.s390x",
            "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.src",
            "AppStream-10.0.Z:libarchive-0:3.7.7-4.el10_0.x86_64",
            "AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.s390x",
            "AppStream-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.aarch64",
            "AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.ppc64le",
            "AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.s390x",
            "AppStream-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.x86_64",
            "AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.aarch64",
            "AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.ppc64le",
            "AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.s390x",
            "AppStream-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.x86_64",
            "BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.s390x",
            "BaseOS-10.0.Z:bsdcat-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.s390x",
            "BaseOS-10.0.Z:bsdcpio-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.aarch64",
            "BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.ppc64le",
            "BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.s390x",
            "BaseOS-10.0.Z:bsdtar-0:3.7.7-4.el10_0.x86_64",
            "BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.s390x",
            "BaseOS-10.0.Z:bsdtar-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.s390x",
            "BaseOS-10.0.Z:bsdunzip-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.aarch64",
            "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.ppc64le",
            "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.s390x",
            "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.src",
            "BaseOS-10.0.Z:libarchive-0:3.7.7-4.el10_0.x86_64",
            "BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.aarch64",
            "BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.ppc64le",
            "BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.s390x",
            "BaseOS-10.0.Z:libarchive-debuginfo-0:3.7.7-4.el10_0.x86_64",
            "BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.aarch64",
            "BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.ppc64le",
            "BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.s390x",
            "BaseOS-10.0.Z:libarchive-debugsource-0:3.7.7-4.el10_0.x86_64",
            "BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.aarch64",
            "BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.ppc64le",
            "BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.s390x",
            "BaseOS-10.0.Z:libarchive-devel-0:3.7.7-4.el10_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c"
    }
  ]
}

RHSA-2025:14141

Vulnerability from csaf_redhat - Published: 2025-08-20 09:04 - Updated: 2026-06-05 00:24

Summary

Red Hat Security Advisory: libarchive security update

Severity

Important

Notes

Topic: An update for libarchive is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

CVE-2025-5914

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 70 products

Product	Version	Remediation
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.src	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.x86_64	—	Vendor Fix fix

Threats

Impact Important

References

10 references

URL	Category
https://access.redhat.com/errata/RHSA-2025:14141	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2370861	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-5914	self
https://bugzilla.redhat.com/show_bug.cgi?id=2370861	external
https://www.cve.org/CVERecord?id=CVE-2025-5914	external
https://nvd.nist.gov/vuln/detail/CVE-2025-5914	external
https://github.com/libarchive/libarchive/pull/2598	external
https://github.com/libarchive/libarchive/releases…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libarchive is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.\n\nSecurity Fix(es):\n\n* libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c (CVE-2025-5914)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:14141",
        "url": "https://access.redhat.com/errata/RHSA-2025:14141"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2370861",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14141.json"
      }
    ],
    "title": "Red Hat Security Advisory: libarchive security update",
    "tracking": {
      "current_release_date": "2026-06-05T00:24:53+00:00",
      "generator": {
        "date": "2026-06-05T00:24:53+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2025:14141",
      "initial_release_date": "2025-08-20T09:04:49+00:00",
      "revision_history": [
        {
          "date": "2025-08-20T09:04:49+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-20T09:04:49+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-05T00:24:53+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream E4S (v.9.0)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream E4S (v.9.0)",
                  "product_id": "AppStream-9.0.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_e4s:9.0::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
                  "product_id": "BaseOS-9.0.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_e4s:9.0::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.5.3-2.el9_0.1.src",
                "product": {
                  "name": "libarchive-0:3.5.3-2.el9_0.1.src",
                  "product_id": "libarchive-0:3.5.3-2.el9_0.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.5.3-2.el9_0.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.5.3-2.el9_0.1.aarch64",
                "product": {
                  "name": "libarchive-0:3.5.3-2.el9_0.1.aarch64",
                  "product_id": "libarchive-0:3.5.3-2.el9_0.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.5.3-2.el9_0.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.aarch64",
                "product": {
                  "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.aarch64",
                  "product_id": "libarchive-debugsource-0:3.5.3-2.el9_0.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.5.3-2.el9_0.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
                  "product_id": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.5.3-2.el9_0.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
                  "product_id": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.5.3-2.el9_0.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
                  "product_id": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.5.3-2.el9_0.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
                "product": {
                  "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
                  "product_id": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.5.3-2.el9_0.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-0:3.5.3-2.el9_0.1.aarch64",
                "product": {
                  "name": "bsdtar-0:3.5.3-2.el9_0.1.aarch64",
                  "product_id": "bsdtar-0:3.5.3-2.el9_0.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.5.3-2.el9_0.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.5.3-2.el9_0.1.ppc64le",
                "product": {
                  "name": "libarchive-0:3.5.3-2.el9_0.1.ppc64le",
                  "product_id": "libarchive-0:3.5.3-2.el9_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.5.3-2.el9_0.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.ppc64le",
                "product": {
                  "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.ppc64le",
                  "product_id": "libarchive-debugsource-0:3.5.3-2.el9_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.5.3-2.el9_0.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
                  "product_id": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.5.3-2.el9_0.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
                  "product_id": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.5.3-2.el9_0.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
                  "product_id": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.5.3-2.el9_0.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
                "product": {
                  "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
                  "product_id": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.5.3-2.el9_0.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-0:3.5.3-2.el9_0.1.ppc64le",
                "product": {
                  "name": "bsdtar-0:3.5.3-2.el9_0.1.ppc64le",
                  "product_id": "bsdtar-0:3.5.3-2.el9_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.5.3-2.el9_0.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.5.3-2.el9_0.1.i686",
                "product": {
                  "name": "libarchive-0:3.5.3-2.el9_0.1.i686",
                  "product_id": "libarchive-0:3.5.3-2.el9_0.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.5.3-2.el9_0.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.i686",
                "product": {
                  "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.i686",
                  "product_id": "libarchive-debugsource-0:3.5.3-2.el9_0.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.5.3-2.el9_0.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.i686",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.i686",
                  "product_id": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.5.3-2.el9_0.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.i686",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.i686",
                  "product_id": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.5.3-2.el9_0.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.i686",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.i686",
                  "product_id": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.5.3-2.el9_0.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.i686",
                "product": {
                  "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.i686",
                  "product_id": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.5.3-2.el9_0.1?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.5.3-2.el9_0.1.x86_64",
                "product": {
                  "name": "libarchive-0:3.5.3-2.el9_0.1.x86_64",
                  "product_id": "libarchive-0:3.5.3-2.el9_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.5.3-2.el9_0.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.x86_64",
                "product": {
                  "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.x86_64",
                  "product_id": "libarchive-debugsource-0:3.5.3-2.el9_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.5.3-2.el9_0.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
                  "product_id": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.5.3-2.el9_0.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
                  "product_id": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.5.3-2.el9_0.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
                  "product_id": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.5.3-2.el9_0.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
                "product": {
                  "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
                  "product_id": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.5.3-2.el9_0.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-0:3.5.3-2.el9_0.1.x86_64",
                "product": {
                  "name": "bsdtar-0:3.5.3-2.el9_0.1.x86_64",
                  "product_id": "bsdtar-0:3.5.3-2.el9_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.5.3-2.el9_0.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.5.3-2.el9_0.1.s390x",
                "product": {
                  "name": "libarchive-0:3.5.3-2.el9_0.1.s390x",
                  "product_id": "libarchive-0:3.5.3-2.el9_0.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.5.3-2.el9_0.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.s390x",
                "product": {
                  "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.s390x",
                  "product_id": "libarchive-debugsource-0:3.5.3-2.el9_0.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.5.3-2.el9_0.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.s390x",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.s390x",
                  "product_id": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.5.3-2.el9_0.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.s390x",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.s390x",
                  "product_id": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.5.3-2.el9_0.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.s390x",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.s390x",
                  "product_id": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.5.3-2.el9_0.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.s390x",
                "product": {
                  "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.s390x",
                  "product_id": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.5.3-2.el9_0.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-0:3.5.3-2.el9_0.1.s390x",
                "product": {
                  "name": "bsdtar-0:3.5.3-2.el9_0.1.s390x",
                  "product_id": "bsdtar-0:3.5.3-2.el9_0.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.5.3-2.el9_0.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.aarch64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.i686"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.i686",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.ppc64le"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.s390x"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.x86_64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.aarch64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.i686"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.i686",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.ppc64le"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.s390x"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.x86_64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-2.el9_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.aarch64"
        },
        "product_reference": "bsdtar-0:3.5.3-2.el9_0.1.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-2.el9_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.ppc64le"
        },
        "product_reference": "bsdtar-0:3.5.3-2.el9_0.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-2.el9_0.1.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.s390x"
        },
        "product_reference": "bsdtar-0:3.5.3-2.el9_0.1.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-2.el9_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.x86_64"
        },
        "product_reference": "bsdtar-0:3.5.3-2.el9_0.1.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.aarch64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.i686"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.i686",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.ppc64le"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.s390x"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.x86_64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-2.el9_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.aarch64"
        },
        "product_reference": "libarchive-0:3.5.3-2.el9_0.1.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-2.el9_0.1.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.i686"
        },
        "product_reference": "libarchive-0:3.5.3-2.el9_0.1.i686",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-2.el9_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.ppc64le"
        },
        "product_reference": "libarchive-0:3.5.3-2.el9_0.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-2.el9_0.1.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.s390x"
        },
        "product_reference": "libarchive-0:3.5.3-2.el9_0.1.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-2.el9_0.1.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.src"
        },
        "product_reference": "libarchive-0:3.5.3-2.el9_0.1.src",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-2.el9_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.x86_64"
        },
        "product_reference": "libarchive-0:3.5.3-2.el9_0.1.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.aarch64"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.i686"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.i686",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.ppc64le"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.s390x"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.x86_64"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.aarch64"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-2.el9_0.1.aarch64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.i686"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-2.el9_0.1.i686",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.ppc64le"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-2.el9_0.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.s390x"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-2.el9_0.1.s390x",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
          "product_id": "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.x86_64"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-2.el9_0.1.x86_64",
        "relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.aarch64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.i686"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.i686",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.ppc64le"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.s390x"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.s390x",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.x86_64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.aarch64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.i686"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.i686",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.ppc64le"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.s390x"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.s390x",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.x86_64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-2.el9_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.aarch64"
        },
        "product_reference": "bsdtar-0:3.5.3-2.el9_0.1.aarch64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-2.el9_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.ppc64le"
        },
        "product_reference": "bsdtar-0:3.5.3-2.el9_0.1.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-2.el9_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.s390x"
        },
        "product_reference": "bsdtar-0:3.5.3-2.el9_0.1.s390x",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-2.el9_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.x86_64"
        },
        "product_reference": "bsdtar-0:3.5.3-2.el9_0.1.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.aarch64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.i686"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.i686",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.ppc64le"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.s390x"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.s390x",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.x86_64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-2.el9_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.aarch64"
        },
        "product_reference": "libarchive-0:3.5.3-2.el9_0.1.aarch64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-2.el9_0.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.i686"
        },
        "product_reference": "libarchive-0:3.5.3-2.el9_0.1.i686",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-2.el9_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.ppc64le"
        },
        "product_reference": "libarchive-0:3.5.3-2.el9_0.1.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-2.el9_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.s390x"
        },
        "product_reference": "libarchive-0:3.5.3-2.el9_0.1.s390x",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-2.el9_0.1.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.src"
        },
        "product_reference": "libarchive-0:3.5.3-2.el9_0.1.src",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-2.el9_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.x86_64"
        },
        "product_reference": "libarchive-0:3.5.3-2.el9_0.1.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.aarch64"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.i686"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.i686",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.ppc64le"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.s390x"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.s390x",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.x86_64"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.aarch64"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-2.el9_0.1.aarch64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.i686"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-2.el9_0.1.i686",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.ppc64le"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-2.el9_0.1.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.s390x"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-2.el9_0.1.s390x",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-2.el9_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.x86_64"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-2.el9_0.1.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-5914",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2025-06-06T17:58:25.491000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2370861"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has rated this vulnerability as Important because it allows a local attacker with limited privileges to trigger a double-free in libarchive\u0027s RAR parser by providing a specially crafted RAR archive. Successful exploitation could result in code execution or application crashes.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
          "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.i686",
          "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
          "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.s390x",
          "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
          "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
          "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.i686",
          "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
          "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.s390x",
          "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
          "AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.aarch64",
          "AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.ppc64le",
          "AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.s390x",
          "AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.x86_64",
          "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
          "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.i686",
          "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
          "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.s390x",
          "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
          "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.aarch64",
          "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.i686",
          "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.ppc64le",
          "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.s390x",
          "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.src",
          "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.x86_64",
          "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
          "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.i686",
          "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
          "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.s390x",
          "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
          "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.aarch64",
          "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.i686",
          "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.ppc64le",
          "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.s390x",
          "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.x86_64",
          "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
          "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.i686",
          "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
          "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.s390x",
          "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
          "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
          "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.i686",
          "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
          "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.s390x",
          "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
          "BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.aarch64",
          "BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.ppc64le",
          "BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.s390x",
          "BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.x86_64",
          "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
          "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.i686",
          "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
          "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.s390x",
          "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
          "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.aarch64",
          "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.i686",
          "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.ppc64le",
          "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.s390x",
          "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.src",
          "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.x86_64",
          "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
          "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.i686",
          "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
          "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.s390x",
          "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
          "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.aarch64",
          "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.i686",
          "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.ppc64le",
          "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.s390x",
          "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "RHBZ#2370861",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-5914",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5914",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "https://github.com/libarchive/libarchive/pull/2598",
          "url": "https://github.com/libarchive/libarchive/pull/2598"
        },
        {
          "category": "external",
          "summary": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0",
          "url": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0"
        }
      ],
      "release_date": "2025-05-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-20T09:04:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
            "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.i686",
            "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
            "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.s390x",
            "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
            "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
            "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.i686",
            "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
            "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.s390x",
            "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
            "AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.aarch64",
            "AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.ppc64le",
            "AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.s390x",
            "AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.x86_64",
            "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
            "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.i686",
            "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
            "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.s390x",
            "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
            "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.aarch64",
            "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.i686",
            "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.ppc64le",
            "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.s390x",
            "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.src",
            "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.x86_64",
            "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
            "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.i686",
            "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
            "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.s390x",
            "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
            "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.aarch64",
            "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.i686",
            "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.ppc64le",
            "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.s390x",
            "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.x86_64",
            "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
            "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.i686",
            "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
            "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.s390x",
            "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
            "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
            "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.i686",
            "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
            "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.s390x",
            "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
            "BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.aarch64",
            "BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.ppc64le",
            "BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.s390x",
            "BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.x86_64",
            "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
            "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.i686",
            "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
            "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.s390x",
            "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
            "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.aarch64",
            "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.i686",
            "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.ppc64le",
            "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.s390x",
            "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.src",
            "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.x86_64",
            "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
            "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.i686",
            "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
            "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.s390x",
            "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
            "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.aarch64",
            "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.i686",
            "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.ppc64le",
            "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.s390x",
            "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:14141"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
            "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.i686",
            "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
            "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.s390x",
            "AppStream-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
            "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
            "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.i686",
            "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
            "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.s390x",
            "AppStream-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
            "AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.aarch64",
            "AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.ppc64le",
            "AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.s390x",
            "AppStream-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.x86_64",
            "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
            "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.i686",
            "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
            "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.s390x",
            "AppStream-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
            "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.aarch64",
            "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.i686",
            "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.ppc64le",
            "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.s390x",
            "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.src",
            "AppStream-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.x86_64",
            "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
            "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.i686",
            "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
            "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.s390x",
            "AppStream-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
            "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.aarch64",
            "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.i686",
            "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.ppc64le",
            "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.s390x",
            "AppStream-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.x86_64",
            "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
            "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.i686",
            "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
            "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.s390x",
            "BaseOS-9.0.0.Z.E4S:bsdcat-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
            "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
            "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.i686",
            "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
            "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.s390x",
            "BaseOS-9.0.0.Z.E4S:bsdcpio-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
            "BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.aarch64",
            "BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.ppc64le",
            "BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.s390x",
            "BaseOS-9.0.0.Z.E4S:bsdtar-0:3.5.3-2.el9_0.1.x86_64",
            "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
            "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.i686",
            "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
            "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.s390x",
            "BaseOS-9.0.0.Z.E4S:bsdtar-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
            "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.aarch64",
            "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.i686",
            "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.ppc64le",
            "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.s390x",
            "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.src",
            "BaseOS-9.0.0.Z.E4S:libarchive-0:3.5.3-2.el9_0.1.x86_64",
            "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.aarch64",
            "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.i686",
            "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.ppc64le",
            "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.s390x",
            "BaseOS-9.0.0.Z.E4S:libarchive-debuginfo-0:3.5.3-2.el9_0.1.x86_64",
            "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.aarch64",
            "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.i686",
            "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.ppc64le",
            "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.s390x",
            "BaseOS-9.0.0.Z.E4S:libarchive-debugsource-0:3.5.3-2.el9_0.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c"
    }
  ]
}

RHSA-2025:14142

Vulnerability from csaf_redhat - Published: 2025-08-20 09:27 - Updated: 2026-06-05 00:24

Summary

Red Hat Security Advisory: libarchive security update

Severity

Important

Notes

Topic: An update for libarchive is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

CVE-2025-5914

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 120 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.src	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.src	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.i686	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.x86_64	—	Vendor Fix fix

Threats

Impact Important

References

10 references

URL	Category
https://access.redhat.com/errata/RHSA-2025:14142	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2370861	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-5914	self
https://bugzilla.redhat.com/show_bug.cgi?id=2370861	external
https://www.cve.org/CVERecord?id=CVE-2025-5914	external
https://nvd.nist.gov/vuln/detail/CVE-2025-5914	external
https://github.com/libarchive/libarchive/pull/2598	external
https://github.com/libarchive/libarchive/releases…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libarchive is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.\n\nSecurity Fix(es):\n\n* libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c (CVE-2025-5914)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:14142",
        "url": "https://access.redhat.com/errata/RHSA-2025:14142"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2370861",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14142.json"
      }
    ],
    "title": "Red Hat Security Advisory: libarchive security update",
    "tracking": {
      "current_release_date": "2026-06-05T00:24:59+00:00",
      "generator": {
        "date": "2026-06-05T00:24:59+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2025:14142",
      "initial_release_date": "2025-08-20T09:27:05+00:00",
      "revision_history": [
        {
          "date": "2025-08-20T09:27:05+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-20T09:27:05+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-05T00:24:59+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
                  "product_id": "AppStream-9.4.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus:9.4::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
                  "product_id": "BaseOS-9.4.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:9.4::baseos"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat CodeReady Linux Builder EUS (v.9.4)",
                "product": {
                  "name": "Red Hat CodeReady Linux Builder EUS (v.9.4)",
                  "product_id": "CRB-9.4.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus:9.4::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bsdtar-0:3.5.3-4.el9_4.1.aarch64",
                "product": {
                  "name": "bsdtar-0:3.5.3-4.el9_4.1.aarch64",
                  "product_id": "bsdtar-0:3.5.3-4.el9_4.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.5.3-4.el9_4.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.5.3-4.el9_4.1.aarch64",
                "product": {
                  "name": "libarchive-devel-0:3.5.3-4.el9_4.1.aarch64",
                  "product_id": "libarchive-devel-0:3.5.3-4.el9_4.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.5.3-4.el9_4.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64",
                "product": {
                  "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64",
                  "product_id": "libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.5.3-4.el9_4.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
                  "product_id": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.5.3-4.el9_4.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
                  "product_id": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.5.3-4.el9_4.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
                  "product_id": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.5.3-4.el9_4.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
                "product": {
                  "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
                  "product_id": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.5.3-4.el9_4.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-0:3.5.3-4.el9_4.1.aarch64",
                "product": {
                  "name": "libarchive-0:3.5.3-4.el9_4.1.aarch64",
                  "product_id": "libarchive-0:3.5.3-4.el9_4.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.5.3-4.el9_4.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bsdtar-0:3.5.3-4.el9_4.1.ppc64le",
                "product": {
                  "name": "bsdtar-0:3.5.3-4.el9_4.1.ppc64le",
                  "product_id": "bsdtar-0:3.5.3-4.el9_4.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.5.3-4.el9_4.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le",
                "product": {
                  "name": "libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le",
                  "product_id": "libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.5.3-4.el9_4.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le",
                "product": {
                  "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le",
                  "product_id": "libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.5.3-4.el9_4.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
                  "product_id": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.5.3-4.el9_4.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
                  "product_id": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.5.3-4.el9_4.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
                  "product_id": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.5.3-4.el9_4.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
                "product": {
                  "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
                  "product_id": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.5.3-4.el9_4.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-0:3.5.3-4.el9_4.1.ppc64le",
                "product": {
                  "name": "libarchive-0:3.5.3-4.el9_4.1.ppc64le",
                  "product_id": "libarchive-0:3.5.3-4.el9_4.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.5.3-4.el9_4.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bsdtar-0:3.5.3-4.el9_4.1.x86_64",
                "product": {
                  "name": "bsdtar-0:3.5.3-4.el9_4.1.x86_64",
                  "product_id": "bsdtar-0:3.5.3-4.el9_4.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.5.3-4.el9_4.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.5.3-4.el9_4.1.x86_64",
                "product": {
                  "name": "libarchive-devel-0:3.5.3-4.el9_4.1.x86_64",
                  "product_id": "libarchive-devel-0:3.5.3-4.el9_4.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.5.3-4.el9_4.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64",
                "product": {
                  "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64",
                  "product_id": "libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.5.3-4.el9_4.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
                  "product_id": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.5.3-4.el9_4.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
                  "product_id": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.5.3-4.el9_4.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
                  "product_id": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.5.3-4.el9_4.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
                "product": {
                  "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
                  "product_id": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.5.3-4.el9_4.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-0:3.5.3-4.el9_4.1.x86_64",
                "product": {
                  "name": "libarchive-0:3.5.3-4.el9_4.1.x86_64",
                  "product_id": "libarchive-0:3.5.3-4.el9_4.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.5.3-4.el9_4.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.5.3-4.el9_4.1.i686",
                "product": {
                  "name": "libarchive-devel-0:3.5.3-4.el9_4.1.i686",
                  "product_id": "libarchive-devel-0:3.5.3-4.el9_4.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.5.3-4.el9_4.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.i686",
                "product": {
                  "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.i686",
                  "product_id": "libarchive-debugsource-0:3.5.3-4.el9_4.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.5.3-4.el9_4.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686",
                  "product_id": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.5.3-4.el9_4.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686",
                  "product_id": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.5.3-4.el9_4.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686",
                  "product_id": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.5.3-4.el9_4.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686",
                "product": {
                  "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686",
                  "product_id": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.5.3-4.el9_4.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-0:3.5.3-4.el9_4.1.i686",
                "product": {
                  "name": "libarchive-0:3.5.3-4.el9_4.1.i686",
                  "product_id": "libarchive-0:3.5.3-4.el9_4.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.5.3-4.el9_4.1?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bsdtar-0:3.5.3-4.el9_4.1.s390x",
                "product": {
                  "name": "bsdtar-0:3.5.3-4.el9_4.1.s390x",
                  "product_id": "bsdtar-0:3.5.3-4.el9_4.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.5.3-4.el9_4.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x",
                "product": {
                  "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x",
                  "product_id": "libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.5.3-4.el9_4.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x",
                  "product_id": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.5.3-4.el9_4.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x",
                  "product_id": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.5.3-4.el9_4.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x",
                  "product_id": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.5.3-4.el9_4.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x",
                "product": {
                  "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x",
                  "product_id": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.5.3-4.el9_4.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-0:3.5.3-4.el9_4.1.s390x",
                "product": {
                  "name": "libarchive-0:3.5.3-4.el9_4.1.s390x",
                  "product_id": "libarchive-0:3.5.3-4.el9_4.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.5.3-4.el9_4.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-devel-0:3.5.3-4.el9_4.1.s390x",
                "product": {
                  "name": "libarchive-devel-0:3.5.3-4.el9_4.1.s390x",
                  "product_id": "libarchive-devel-0:3.5.3-4.el9_4.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-devel@3.5.3-4.el9_4.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.5.3-4.el9_4.1.src",
                "product": {
                  "name": "libarchive-0:3.5.3-4.el9_4.1.src",
                  "product_id": "libarchive-0:3.5.3-4.el9_4.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.5.3-4.el9_4.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "bsdtar-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "bsdtar-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "bsdtar-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "bsdtar-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "libarchive-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "libarchive-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "libarchive-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "libarchive-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-4.el9_4.1.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.src"
        },
        "product_reference": "libarchive-0:3.5.3-4.el9_4.1.src",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "libarchive-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "libarchive-devel-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "libarchive-devel-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "libarchive-devel-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "libarchive-devel-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "bsdtar-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "bsdtar-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "bsdtar-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "bsdtar-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "libarchive-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "libarchive-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "libarchive-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "libarchive-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-4.el9_4.1.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.src"
        },
        "product_reference": "libarchive-0:3.5.3-4.el9_4.1.src",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "libarchive-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "libarchive-devel-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "libarchive-devel-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "libarchive-devel-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
          "product_id": "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "libarchive-devel-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "bsdtar-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "bsdtar-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "bsdtar-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "bsdtar-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "libarchive-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "libarchive-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "libarchive-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "libarchive-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-4.el9_4.1.src as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.src"
        },
        "product_reference": "libarchive-0:3.5.3-4.el9_4.1.src",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "libarchive-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-4.el9_4.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.aarch64"
        },
        "product_reference": "libarchive-devel-0:3.5.3-4.el9_4.1.aarch64",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-4.el9_4.1.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.i686"
        },
        "product_reference": "libarchive-devel-0:3.5.3-4.el9_4.1.i686",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le"
        },
        "product_reference": "libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-4.el9_4.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.s390x"
        },
        "product_reference": "libarchive-devel-0:3.5.3-4.el9_4.1.s390x",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-devel-0:3.5.3-4.el9_4.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)",
          "product_id": "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.x86_64"
        },
        "product_reference": "libarchive-devel-0:3.5.3-4.el9_4.1.x86_64",
        "relates_to_product_reference": "CRB-9.4.0.Z.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-5914",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2025-06-06T17:58:25.491000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2370861"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has rated this vulnerability as Important because it allows a local attacker with limited privileges to trigger a double-free in libarchive\u0027s RAR parser by providing a specially crafted RAR archive. Successful exploitation could result in code execution or application crashes.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
          "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686",
          "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
          "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x",
          "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
          "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
          "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686",
          "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
          "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x",
          "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
          "AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.aarch64",
          "AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.ppc64le",
          "AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.s390x",
          "AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.x86_64",
          "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
          "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686",
          "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
          "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x",
          "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
          "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.aarch64",
          "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.i686",
          "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.ppc64le",
          "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.s390x",
          "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.src",
          "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.x86_64",
          "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
          "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686",
          "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
          "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x",
          "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
          "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64",
          "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.i686",
          "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le",
          "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x",
          "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64",
          "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.aarch64",
          "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.i686",
          "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le",
          "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.s390x",
          "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.x86_64",
          "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
          "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686",
          "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
          "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x",
          "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
          "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
          "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686",
          "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
          "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x",
          "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
          "BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.aarch64",
          "BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.ppc64le",
          "BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.s390x",
          "BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.x86_64",
          "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
          "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686",
          "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
          "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x",
          "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
          "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.aarch64",
          "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.i686",
          "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.ppc64le",
          "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.s390x",
          "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.src",
          "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.x86_64",
          "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
          "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686",
          "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
          "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x",
          "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
          "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64",
          "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.i686",
          "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le",
          "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x",
          "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64",
          "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.aarch64",
          "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.i686",
          "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le",
          "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.s390x",
          "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.x86_64",
          "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
          "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686",
          "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
          "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x",
          "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
          "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
          "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686",
          "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
          "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x",
          "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
          "CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.aarch64",
          "CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.ppc64le",
          "CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.s390x",
          "CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.x86_64",
          "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
          "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686",
          "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
          "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x",
          "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
          "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.aarch64",
          "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.i686",
          "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.ppc64le",
          "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.s390x",
          "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.src",
          "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.x86_64",
          "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
          "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686",
          "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
          "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x",
          "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
          "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64",
          "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.i686",
          "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le",
          "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x",
          "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64",
          "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.aarch64",
          "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.i686",
          "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le",
          "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.s390x",
          "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "RHBZ#2370861",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-5914",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5914",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "https://github.com/libarchive/libarchive/pull/2598",
          "url": "https://github.com/libarchive/libarchive/pull/2598"
        },
        {
          "category": "external",
          "summary": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0",
          "url": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0"
        }
      ],
      "release_date": "2025-05-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-20T09:27:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.aarch64",
            "AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.ppc64le",
            "AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.s390x",
            "AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.x86_64",
            "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.aarch64",
            "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.i686",
            "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.ppc64le",
            "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.s390x",
            "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.src",
            "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.x86_64",
            "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64",
            "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.i686",
            "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le",
            "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x",
            "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64",
            "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.aarch64",
            "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.i686",
            "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le",
            "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.s390x",
            "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.x86_64",
            "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.aarch64",
            "BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.ppc64le",
            "BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.s390x",
            "BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.x86_64",
            "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.aarch64",
            "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.i686",
            "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.ppc64le",
            "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.s390x",
            "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.src",
            "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.x86_64",
            "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64",
            "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.i686",
            "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le",
            "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x",
            "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64",
            "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.aarch64",
            "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.i686",
            "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le",
            "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.s390x",
            "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.x86_64",
            "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.aarch64",
            "CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.ppc64le",
            "CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.s390x",
            "CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.x86_64",
            "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.aarch64",
            "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.i686",
            "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.ppc64le",
            "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.s390x",
            "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.src",
            "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.x86_64",
            "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64",
            "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.i686",
            "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le",
            "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x",
            "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64",
            "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.aarch64",
            "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.i686",
            "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le",
            "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.s390x",
            "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:14142"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "AppStream-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "AppStream-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.aarch64",
            "AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.ppc64le",
            "AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.s390x",
            "AppStream-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.x86_64",
            "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "AppStream-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.aarch64",
            "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.i686",
            "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.ppc64le",
            "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.s390x",
            "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.src",
            "AppStream-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.x86_64",
            "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "AppStream-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64",
            "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.i686",
            "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le",
            "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x",
            "AppStream-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64",
            "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.aarch64",
            "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.i686",
            "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le",
            "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.s390x",
            "AppStream-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.x86_64",
            "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "BaseOS-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "BaseOS-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.aarch64",
            "BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.ppc64le",
            "BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.s390x",
            "BaseOS-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.x86_64",
            "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "BaseOS-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.aarch64",
            "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.i686",
            "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.ppc64le",
            "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.s390x",
            "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.src",
            "BaseOS-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.x86_64",
            "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "BaseOS-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64",
            "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.i686",
            "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le",
            "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x",
            "BaseOS-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64",
            "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.aarch64",
            "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.i686",
            "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le",
            "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.s390x",
            "BaseOS-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.x86_64",
            "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "CRB-9.4.0.Z.EUS:bsdcat-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "CRB-9.4.0.Z.EUS:bsdcpio-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.aarch64",
            "CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.ppc64le",
            "CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.s390x",
            "CRB-9.4.0.Z.EUS:bsdtar-0:3.5.3-4.el9_4.1.x86_64",
            "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "CRB-9.4.0.Z.EUS:bsdtar-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.aarch64",
            "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.i686",
            "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.ppc64le",
            "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.s390x",
            "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.src",
            "CRB-9.4.0.Z.EUS:libarchive-0:3.5.3-4.el9_4.1.x86_64",
            "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.aarch64",
            "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.i686",
            "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.ppc64le",
            "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.s390x",
            "CRB-9.4.0.Z.EUS:libarchive-debuginfo-0:3.5.3-4.el9_4.1.x86_64",
            "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.aarch64",
            "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.i686",
            "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.ppc64le",
            "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.s390x",
            "CRB-9.4.0.Z.EUS:libarchive-debugsource-0:3.5.3-4.el9_4.1.x86_64",
            "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.aarch64",
            "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.i686",
            "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.ppc64le",
            "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.s390x",
            "CRB-9.4.0.Z.EUS:libarchive-devel-0:3.5.3-4.el9_4.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c"
    }
  ]
}

RHSA-2025:14525

Vulnerability from csaf_redhat - Published: 2025-08-25 19:18 - Updated: 2026-06-05 00:25

Summary

Red Hat Security Advisory: libarchive security update

Severity

Important

Notes

Topic: An update for libarchive is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

CVE-2025-5914

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 35 products

Product	Version	Remediation
Unresolved product id: BaseOS-8.8.0.Z.E4S:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:bsdtar-0:3.3.3-5.el8_8.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:bsdtar-0:3.3.3-5.el8_8.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.src	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:libarchive-debuginfo-0:3.3.3-5.el8_8.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:libarchive-debuginfo-0:3.3.3-5.el8_8.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:libarchive-debuginfo-0:3.3.3-5.el8_8.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:libarchive-debugsource-0:3.3.3-5.el8_8.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:libarchive-debugsource-0:3.3.3-5.el8_8.1.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.E4S:libarchive-debugsource-0:3.3.3-5.el8_8.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.TUS:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.TUS:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.TUS:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.TUS:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.TUS:bsdtar-0:3.3.3-5.el8_8.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.TUS:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.TUS:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.TUS:libarchive-0:3.3.3-5.el8_8.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.TUS:libarchive-0:3.3.3-5.el8_8.1.src	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.TUS:libarchive-0:3.3.3-5.el8_8.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.TUS:libarchive-debuginfo-0:3.3.3-5.el8_8.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.TUS:libarchive-debuginfo-0:3.3.3-5.el8_8.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.TUS:libarchive-debugsource-0:3.3.3-5.el8_8.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.8.0.Z.TUS:libarchive-debugsource-0:3.3.3-5.el8_8.1.x86_64	—	Vendor Fix fix

Threats

Impact Important

References

10 references

URL	Category
https://access.redhat.com/errata/RHSA-2025:14525	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2370861	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-5914	self
https://bugzilla.redhat.com/show_bug.cgi?id=2370861	external
https://www.cve.org/CVERecord?id=CVE-2025-5914	external
https://nvd.nist.gov/vuln/detail/CVE-2025-5914	external
https://github.com/libarchive/libarchive/pull/2598	external
https://github.com/libarchive/libarchive/releases…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libarchive is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.\n\nSecurity Fix(es):\n\n* libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c (CVE-2025-5914)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:14525",
        "url": "https://access.redhat.com/errata/RHSA-2025:14525"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2370861",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14525.json"
      }
    ],
    "title": "Red Hat Security Advisory: libarchive security update",
    "tracking": {
      "current_release_date": "2026-06-05T00:25:20+00:00",
      "generator": {
        "date": "2026-06-05T00:25:20+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2025:14525",
      "initial_release_date": "2025-08-25T19:18:44+00:00",
      "revision_history": [
        {
          "date": "2025-08-25T19:18:44+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-25T19:18:44+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-05T00:25:20+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
                  "product_id": "BaseOS-8.8.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_e4s:8.8::baseos"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
                  "product_id": "BaseOS-8.8.0.Z.TUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_tus:8.8::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bsdtar-0:3.3.3-5.el8_8.1.ppc64le",
                "product": {
                  "name": "bsdtar-0:3.3.3-5.el8_8.1.ppc64le",
                  "product_id": "bsdtar-0:3.3.3-5.el8_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.3.3-5.el8_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-0:3.3.3-5.el8_8.1.ppc64le",
                "product": {
                  "name": "libarchive-0:3.3.3-5.el8_8.1.ppc64le",
                  "product_id": "libarchive-0:3.3.3-5.el8_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.3.3-5.el8_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.3.3-5.el8_8.1.ppc64le",
                "product": {
                  "name": "libarchive-debugsource-0:3.3.3-5.el8_8.1.ppc64le",
                  "product_id": "libarchive-debugsource-0:3.3.3-5.el8_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.3.3-5.el8_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
                  "product_id": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.3.3-5.el8_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
                  "product_id": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.3.3-5.el8_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
                  "product_id": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.3.3-5.el8_8.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
                "product": {
                  "name": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
                  "product_id": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.3.3-5.el8_8.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bsdtar-0:3.3.3-5.el8_8.1.x86_64",
                "product": {
                  "name": "bsdtar-0:3.3.3-5.el8_8.1.x86_64",
                  "product_id": "bsdtar-0:3.3.3-5.el8_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.3.3-5.el8_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-0:3.3.3-5.el8_8.1.x86_64",
                "product": {
                  "name": "libarchive-0:3.3.3-5.el8_8.1.x86_64",
                  "product_id": "libarchive-0:3.3.3-5.el8_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.3.3-5.el8_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.3.3-5.el8_8.1.x86_64",
                "product": {
                  "name": "libarchive-debugsource-0:3.3.3-5.el8_8.1.x86_64",
                  "product_id": "libarchive-debugsource-0:3.3.3-5.el8_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.3.3-5.el8_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
                  "product_id": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.3.3-5.el8_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
                  "product_id": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.3.3-5.el8_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
                  "product_id": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.3.3-5.el8_8.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
                "product": {
                  "name": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
                  "product_id": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.3.3-5.el8_8.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.3.3-5.el8_8.1.i686",
                "product": {
                  "name": "libarchive-0:3.3.3-5.el8_8.1.i686",
                  "product_id": "libarchive-0:3.3.3-5.el8_8.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.3.3-5.el8_8.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.3.3-5.el8_8.1.i686",
                "product": {
                  "name": "libarchive-debugsource-0:3.3.3-5.el8_8.1.i686",
                  "product_id": "libarchive-debugsource-0:3.3.3-5.el8_8.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.3.3-5.el8_8.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.i686",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.i686",
                  "product_id": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.3.3-5.el8_8.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.i686",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.i686",
                  "product_id": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.3.3-5.el8_8.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.i686",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.i686",
                  "product_id": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.3.3-5.el8_8.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.i686",
                "product": {
                  "name": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.i686",
                  "product_id": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.3.3-5.el8_8.1?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.3.3-5.el8_8.1.src",
                "product": {
                  "name": "libarchive-0:3.3.3-5.el8_8.1.src",
                  "product_id": "libarchive-0:3.3.3-5.el8_8.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.3.3-5.el8_8.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.i686"
        },
        "product_reference": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.i686",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.ppc64le"
        },
        "product_reference": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.x86_64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.i686"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.i686",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.ppc64le"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.x86_64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.3.3-5.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:bsdtar-0:3.3.3-5.el8_8.1.ppc64le"
        },
        "product_reference": "bsdtar-0:3.3.3-5.el8_8.1.ppc64le",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.3.3-5.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:bsdtar-0:3.3.3-5.el8_8.1.x86_64"
        },
        "product_reference": "bsdtar-0:3.3.3-5.el8_8.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.i686"
        },
        "product_reference": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.i686",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.ppc64le"
        },
        "product_reference": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.x86_64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-5.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.i686"
        },
        "product_reference": "libarchive-0:3.3.3-5.el8_8.1.i686",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-5.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.ppc64le"
        },
        "product_reference": "libarchive-0:3.3.3-5.el8_8.1.ppc64le",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-5.el8_8.1.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.src"
        },
        "product_reference": "libarchive-0:3.3.3-5.el8_8.1.src",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-5.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.x86_64"
        },
        "product_reference": "libarchive-0:3.3.3-5.el8_8.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:libarchive-debuginfo-0:3.3.3-5.el8_8.1.i686"
        },
        "product_reference": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.i686",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:libarchive-debuginfo-0:3.3.3-5.el8_8.1.ppc64le"
        },
        "product_reference": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:libarchive-debuginfo-0:3.3.3-5.el8_8.1.x86_64"
        },
        "product_reference": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.3.3-5.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:libarchive-debugsource-0:3.3.3-5.el8_8.1.i686"
        },
        "product_reference": "libarchive-debugsource-0:3.3.3-5.el8_8.1.i686",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.3.3-5.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:libarchive-debugsource-0:3.3.3-5.el8_8.1.ppc64le"
        },
        "product_reference": "libarchive-debugsource-0:3.3.3-5.el8_8.1.ppc64le",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.3.3-5.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.E4S:libarchive-debugsource-0:3.3.3-5.el8_8.1.x86_64"
        },
        "product_reference": "libarchive-debugsource-0:3.3.3-5.el8_8.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.TUS:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.i686"
        },
        "product_reference": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.i686",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.TUS:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.x86_64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.TUS:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.i686"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.i686",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.TUS:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.x86_64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.3.3-5.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.TUS:bsdtar-0:3.3.3-5.el8_8.1.x86_64"
        },
        "product_reference": "bsdtar-0:3.3.3-5.el8_8.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.TUS:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.i686"
        },
        "product_reference": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.i686",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.TUS:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.x86_64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-5.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.TUS:libarchive-0:3.3.3-5.el8_8.1.i686"
        },
        "product_reference": "libarchive-0:3.3.3-5.el8_8.1.i686",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-5.el8_8.1.src as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.TUS:libarchive-0:3.3.3-5.el8_8.1.src"
        },
        "product_reference": "libarchive-0:3.3.3-5.el8_8.1.src",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.3-5.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.TUS:libarchive-0:3.3.3-5.el8_8.1.x86_64"
        },
        "product_reference": "libarchive-0:3.3.3-5.el8_8.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.TUS:libarchive-debuginfo-0:3.3.3-5.el8_8.1.i686"
        },
        "product_reference": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.i686",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.TUS:libarchive-debuginfo-0:3.3.3-5.el8_8.1.x86_64"
        },
        "product_reference": "libarchive-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.3.3-5.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.TUS:libarchive-debugsource-0:3.3.3-5.el8_8.1.i686"
        },
        "product_reference": "libarchive-debugsource-0:3.3.3-5.el8_8.1.i686",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.3.3-5.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
          "product_id": "BaseOS-8.8.0.Z.TUS:libarchive-debugsource-0:3.3.3-5.el8_8.1.x86_64"
        },
        "product_reference": "libarchive-debugsource-0:3.3.3-5.el8_8.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-5914",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2025-06-06T17:58:25.491000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2370861"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has rated this vulnerability as Important because it allows a local attacker with limited privileges to trigger a double-free in libarchive\u0027s RAR parser by providing a specially crafted RAR archive. Successful exploitation could result in code execution or application crashes.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.8.0.Z.E4S:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.i686",
          "BaseOS-8.8.0.Z.E4S:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
          "BaseOS-8.8.0.Z.E4S:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
          "BaseOS-8.8.0.Z.E4S:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.i686",
          "BaseOS-8.8.0.Z.E4S:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
          "BaseOS-8.8.0.Z.E4S:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
          "BaseOS-8.8.0.Z.E4S:bsdtar-0:3.3.3-5.el8_8.1.ppc64le",
          "BaseOS-8.8.0.Z.E4S:bsdtar-0:3.3.3-5.el8_8.1.x86_64",
          "BaseOS-8.8.0.Z.E4S:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.i686",
          "BaseOS-8.8.0.Z.E4S:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
          "BaseOS-8.8.0.Z.E4S:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
          "BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.i686",
          "BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.ppc64le",
          "BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.src",
          "BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.x86_64",
          "BaseOS-8.8.0.Z.E4S:libarchive-debuginfo-0:3.3.3-5.el8_8.1.i686",
          "BaseOS-8.8.0.Z.E4S:libarchive-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
          "BaseOS-8.8.0.Z.E4S:libarchive-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
          "BaseOS-8.8.0.Z.E4S:libarchive-debugsource-0:3.3.3-5.el8_8.1.i686",
          "BaseOS-8.8.0.Z.E4S:libarchive-debugsource-0:3.3.3-5.el8_8.1.ppc64le",
          "BaseOS-8.8.0.Z.E4S:libarchive-debugsource-0:3.3.3-5.el8_8.1.x86_64",
          "BaseOS-8.8.0.Z.TUS:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.i686",
          "BaseOS-8.8.0.Z.TUS:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
          "BaseOS-8.8.0.Z.TUS:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.i686",
          "BaseOS-8.8.0.Z.TUS:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
          "BaseOS-8.8.0.Z.TUS:bsdtar-0:3.3.3-5.el8_8.1.x86_64",
          "BaseOS-8.8.0.Z.TUS:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.i686",
          "BaseOS-8.8.0.Z.TUS:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
          "BaseOS-8.8.0.Z.TUS:libarchive-0:3.3.3-5.el8_8.1.i686",
          "BaseOS-8.8.0.Z.TUS:libarchive-0:3.3.3-5.el8_8.1.src",
          "BaseOS-8.8.0.Z.TUS:libarchive-0:3.3.3-5.el8_8.1.x86_64",
          "BaseOS-8.8.0.Z.TUS:libarchive-debuginfo-0:3.3.3-5.el8_8.1.i686",
          "BaseOS-8.8.0.Z.TUS:libarchive-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
          "BaseOS-8.8.0.Z.TUS:libarchive-debugsource-0:3.3.3-5.el8_8.1.i686",
          "BaseOS-8.8.0.Z.TUS:libarchive-debugsource-0:3.3.3-5.el8_8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "RHBZ#2370861",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-5914",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5914",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "https://github.com/libarchive/libarchive/pull/2598",
          "url": "https://github.com/libarchive/libarchive/pull/2598"
        },
        {
          "category": "external",
          "summary": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0",
          "url": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0"
        }
      ],
      "release_date": "2025-05-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-25T19:18:44+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.8.0.Z.E4S:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.E4S:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
            "BaseOS-8.8.0.Z.E4S:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.E4S:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.E4S:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
            "BaseOS-8.8.0.Z.E4S:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.E4S:bsdtar-0:3.3.3-5.el8_8.1.ppc64le",
            "BaseOS-8.8.0.Z.E4S:bsdtar-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.E4S:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.E4S:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
            "BaseOS-8.8.0.Z.E4S:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.ppc64le",
            "BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.src",
            "BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.E4S:libarchive-debuginfo-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.E4S:libarchive-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
            "BaseOS-8.8.0.Z.E4S:libarchive-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.E4S:libarchive-debugsource-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.E4S:libarchive-debugsource-0:3.3.3-5.el8_8.1.ppc64le",
            "BaseOS-8.8.0.Z.E4S:libarchive-debugsource-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.TUS:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.TUS:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.TUS:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.TUS:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.TUS:bsdtar-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.TUS:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.TUS:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.TUS:libarchive-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.TUS:libarchive-0:3.3.3-5.el8_8.1.src",
            "BaseOS-8.8.0.Z.TUS:libarchive-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.TUS:libarchive-debuginfo-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.TUS:libarchive-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.TUS:libarchive-debugsource-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.TUS:libarchive-debugsource-0:3.3.3-5.el8_8.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:14525"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.8.0.Z.E4S:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.E4S:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
            "BaseOS-8.8.0.Z.E4S:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.E4S:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.E4S:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
            "BaseOS-8.8.0.Z.E4S:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.E4S:bsdtar-0:3.3.3-5.el8_8.1.ppc64le",
            "BaseOS-8.8.0.Z.E4S:bsdtar-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.E4S:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.E4S:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
            "BaseOS-8.8.0.Z.E4S:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.ppc64le",
            "BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.src",
            "BaseOS-8.8.0.Z.E4S:libarchive-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.E4S:libarchive-debuginfo-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.E4S:libarchive-debuginfo-0:3.3.3-5.el8_8.1.ppc64le",
            "BaseOS-8.8.0.Z.E4S:libarchive-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.E4S:libarchive-debugsource-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.E4S:libarchive-debugsource-0:3.3.3-5.el8_8.1.ppc64le",
            "BaseOS-8.8.0.Z.E4S:libarchive-debugsource-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.TUS:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.TUS:bsdcat-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.TUS:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.TUS:bsdcpio-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.TUS:bsdtar-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.TUS:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.TUS:bsdtar-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.TUS:libarchive-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.TUS:libarchive-0:3.3.3-5.el8_8.1.src",
            "BaseOS-8.8.0.Z.TUS:libarchive-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.TUS:libarchive-debuginfo-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.TUS:libarchive-debuginfo-0:3.3.3-5.el8_8.1.x86_64",
            "BaseOS-8.8.0.Z.TUS:libarchive-debugsource-0:3.3.3-5.el8_8.1.i686",
            "BaseOS-8.8.0.Z.TUS:libarchive-debugsource-0:3.3.3-5.el8_8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c"
    }
  ]
}

RHSA-2025:14528

Vulnerability from csaf_redhat - Published: 2025-08-25 19:49 - Updated: 2026-06-05 00:25

Summary

Red Hat Security Advisory: libarchive security update

Severity

Important

Notes

Topic: An update for libarchive is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

CVE-2025-5914

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 14 products

Product	Version	Remediation
Unresolved product id: BaseOS-8.2.0.Z.AUS:bsdcat-debuginfo-0:3.3.2-8.el8_2.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.Z.AUS:bsdcat-debuginfo-0:3.3.2-8.el8_2.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.Z.AUS:bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.Z.AUS:bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.Z.AUS:bsdtar-0:3.3.2-8.el8_2.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.Z.AUS:bsdtar-debuginfo-0:3.3.2-8.el8_2.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.Z.AUS:bsdtar-debuginfo-0:3.3.2-8.el8_2.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.Z.AUS:libarchive-0:3.3.2-8.el8_2.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.Z.AUS:libarchive-0:3.3.2-8.el8_2.1.src	—	Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.Z.AUS:libarchive-0:3.3.2-8.el8_2.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.Z.AUS:libarchive-debuginfo-0:3.3.2-8.el8_2.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.Z.AUS:libarchive-debuginfo-0:3.3.2-8.el8_2.1.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.Z.AUS:libarchive-debugsource-0:3.3.2-8.el8_2.1.i686	—	Vendor Fix fix
Unresolved product id: BaseOS-8.2.0.Z.AUS:libarchive-debugsource-0:3.3.2-8.el8_2.1.x86_64	—	Vendor Fix fix

Threats

Impact Important

References

10 references

URL	Category
https://access.redhat.com/errata/RHSA-2025:14528	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2370861	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-5914	self
https://bugzilla.redhat.com/show_bug.cgi?id=2370861	external
https://www.cve.org/CVERecord?id=CVE-2025-5914	external
https://nvd.nist.gov/vuln/detail/CVE-2025-5914	external
https://github.com/libarchive/libarchive/pull/2598	external
https://github.com/libarchive/libarchive/releases…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libarchive is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.\n\nSecurity Fix(es):\n\n* libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c (CVE-2025-5914)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:14528",
        "url": "https://access.redhat.com/errata/RHSA-2025:14528"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2370861",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14528.json"
      }
    ],
    "title": "Red Hat Security Advisory: libarchive security update",
    "tracking": {
      "current_release_date": "2026-06-05T00:25:28+00:00",
      "generator": {
        "date": "2026-06-05T00:25:28+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2025:14528",
      "initial_release_date": "2025-08-25T19:49:08+00:00",
      "revision_history": [
        {
          "date": "2025-08-25T19:49:08+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-25T19:49:08+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-05T00:25:28+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
                  "product_id": "BaseOS-8.2.0.Z.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:8.2::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bsdtar-0:3.3.2-8.el8_2.1.x86_64",
                "product": {
                  "name": "bsdtar-0:3.3.2-8.el8_2.1.x86_64",
                  "product_id": "bsdtar-0:3.3.2-8.el8_2.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar@3.3.2-8.el8_2.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-0:3.3.2-8.el8_2.1.x86_64",
                "product": {
                  "name": "libarchive-0:3.3.2-8.el8_2.1.x86_64",
                  "product_id": "libarchive-0:3.3.2-8.el8_2.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.3.2-8.el8_2.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.3.2-8.el8_2.1.x86_64",
                "product": {
                  "name": "libarchive-debugsource-0:3.3.2-8.el8_2.1.x86_64",
                  "product_id": "libarchive-debugsource-0:3.3.2-8.el8_2.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.3.2-8.el8_2.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
                  "product_id": "bsdcat-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.3.2-8.el8_2.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
                  "product_id": "bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.3.2-8.el8_2.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
                  "product_id": "bsdtar-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.3.2-8.el8_2.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
                "product": {
                  "name": "libarchive-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
                  "product_id": "libarchive-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.3.2-8.el8_2.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.3.2-8.el8_2.1.i686",
                "product": {
                  "name": "libarchive-0:3.3.2-8.el8_2.1.i686",
                  "product_id": "libarchive-0:3.3.2-8.el8_2.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.3.2-8.el8_2.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debugsource-0:3.3.2-8.el8_2.1.i686",
                "product": {
                  "name": "libarchive-debugsource-0:3.3.2-8.el8_2.1.i686",
                  "product_id": "libarchive-debugsource-0:3.3.2-8.el8_2.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debugsource@3.3.2-8.el8_2.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcat-debuginfo-0:3.3.2-8.el8_2.1.i686",
                "product": {
                  "name": "bsdcat-debuginfo-0:3.3.2-8.el8_2.1.i686",
                  "product_id": "bsdcat-debuginfo-0:3.3.2-8.el8_2.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.3.2-8.el8_2.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.i686",
                "product": {
                  "name": "bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.i686",
                  "product_id": "bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.3.2-8.el8_2.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bsdtar-debuginfo-0:3.3.2-8.el8_2.1.i686",
                "product": {
                  "name": "bsdtar-debuginfo-0:3.3.2-8.el8_2.1.i686",
                  "product_id": "bsdtar-debuginfo-0:3.3.2-8.el8_2.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.3.2-8.el8_2.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libarchive-debuginfo-0:3.3.2-8.el8_2.1.i686",
                "product": {
                  "name": "libarchive-debuginfo-0:3.3.2-8.el8_2.1.i686",
                  "product_id": "libarchive-debuginfo-0:3.3.2-8.el8_2.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive-debuginfo@3.3.2-8.el8_2.1?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libarchive-0:3.3.2-8.el8_2.1.src",
                "product": {
                  "name": "libarchive-0:3.3.2-8.el8_2.1.src",
                  "product_id": "libarchive-0:3.3.2-8.el8_2.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libarchive@3.3.2-8.el8_2.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.3.2-8.el8_2.1.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
          "product_id": "BaseOS-8.2.0.Z.AUS:bsdcat-debuginfo-0:3.3.2-8.el8_2.1.i686"
        },
        "product_reference": "bsdcat-debuginfo-0:3.3.2-8.el8_2.1.i686",
        "relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcat-debuginfo-0:3.3.2-8.el8_2.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
          "product_id": "BaseOS-8.2.0.Z.AUS:bsdcat-debuginfo-0:3.3.2-8.el8_2.1.x86_64"
        },
        "product_reference": "bsdcat-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
          "product_id": "BaseOS-8.2.0.Z.AUS:bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.i686"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.i686",
        "relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
          "product_id": "BaseOS-8.2.0.Z.AUS:bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.x86_64"
        },
        "product_reference": "bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-0:3.3.2-8.el8_2.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
          "product_id": "BaseOS-8.2.0.Z.AUS:bsdtar-0:3.3.2-8.el8_2.1.x86_64"
        },
        "product_reference": "bsdtar-0:3.3.2-8.el8_2.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.3.2-8.el8_2.1.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
          "product_id": "BaseOS-8.2.0.Z.AUS:bsdtar-debuginfo-0:3.3.2-8.el8_2.1.i686"
        },
        "product_reference": "bsdtar-debuginfo-0:3.3.2-8.el8_2.1.i686",
        "relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bsdtar-debuginfo-0:3.3.2-8.el8_2.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
          "product_id": "BaseOS-8.2.0.Z.AUS:bsdtar-debuginfo-0:3.3.2-8.el8_2.1.x86_64"
        },
        "product_reference": "bsdtar-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.2-8.el8_2.1.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
          "product_id": "BaseOS-8.2.0.Z.AUS:libarchive-0:3.3.2-8.el8_2.1.i686"
        },
        "product_reference": "libarchive-0:3.3.2-8.el8_2.1.i686",
        "relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.2-8.el8_2.1.src as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
          "product_id": "BaseOS-8.2.0.Z.AUS:libarchive-0:3.3.2-8.el8_2.1.src"
        },
        "product_reference": "libarchive-0:3.3.2-8.el8_2.1.src",
        "relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-0:3.3.2-8.el8_2.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
          "product_id": "BaseOS-8.2.0.Z.AUS:libarchive-0:3.3.2-8.el8_2.1.x86_64"
        },
        "product_reference": "libarchive-0:3.3.2-8.el8_2.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.3.2-8.el8_2.1.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
          "product_id": "BaseOS-8.2.0.Z.AUS:libarchive-debuginfo-0:3.3.2-8.el8_2.1.i686"
        },
        "product_reference": "libarchive-debuginfo-0:3.3.2-8.el8_2.1.i686",
        "relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debuginfo-0:3.3.2-8.el8_2.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
          "product_id": "BaseOS-8.2.0.Z.AUS:libarchive-debuginfo-0:3.3.2-8.el8_2.1.x86_64"
        },
        "product_reference": "libarchive-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.3.2-8.el8_2.1.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
          "product_id": "BaseOS-8.2.0.Z.AUS:libarchive-debugsource-0:3.3.2-8.el8_2.1.i686"
        },
        "product_reference": "libarchive-debugsource-0:3.3.2-8.el8_2.1.i686",
        "relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libarchive-debugsource-0:3.3.2-8.el8_2.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
          "product_id": "BaseOS-8.2.0.Z.AUS:libarchive-debugsource-0:3.3.2-8.el8_2.1.x86_64"
        },
        "product_reference": "libarchive-debugsource-0:3.3.2-8.el8_2.1.x86_64",
        "relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-5914",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2025-06-06T17:58:25.491000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2370861"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has rated this vulnerability as Important because it allows a local attacker with limited privileges to trigger a double-free in libarchive\u0027s RAR parser by providing a specially crafted RAR archive. Successful exploitation could result in code execution or application crashes.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.2.0.Z.AUS:bsdcat-debuginfo-0:3.3.2-8.el8_2.1.i686",
          "BaseOS-8.2.0.Z.AUS:bsdcat-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
          "BaseOS-8.2.0.Z.AUS:bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.i686",
          "BaseOS-8.2.0.Z.AUS:bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
          "BaseOS-8.2.0.Z.AUS:bsdtar-0:3.3.2-8.el8_2.1.x86_64",
          "BaseOS-8.2.0.Z.AUS:bsdtar-debuginfo-0:3.3.2-8.el8_2.1.i686",
          "BaseOS-8.2.0.Z.AUS:bsdtar-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
          "BaseOS-8.2.0.Z.AUS:libarchive-0:3.3.2-8.el8_2.1.i686",
          "BaseOS-8.2.0.Z.AUS:libarchive-0:3.3.2-8.el8_2.1.src",
          "BaseOS-8.2.0.Z.AUS:libarchive-0:3.3.2-8.el8_2.1.x86_64",
          "BaseOS-8.2.0.Z.AUS:libarchive-debuginfo-0:3.3.2-8.el8_2.1.i686",
          "BaseOS-8.2.0.Z.AUS:libarchive-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
          "BaseOS-8.2.0.Z.AUS:libarchive-debugsource-0:3.3.2-8.el8_2.1.i686",
          "BaseOS-8.2.0.Z.AUS:libarchive-debugsource-0:3.3.2-8.el8_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "RHBZ#2370861",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-5914",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5914",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "https://github.com/libarchive/libarchive/pull/2598",
          "url": "https://github.com/libarchive/libarchive/pull/2598"
        },
        {
          "category": "external",
          "summary": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0",
          "url": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0"
        }
      ],
      "release_date": "2025-05-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-25T19:49:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "BaseOS-8.2.0.Z.AUS:bsdcat-debuginfo-0:3.3.2-8.el8_2.1.i686",
            "BaseOS-8.2.0.Z.AUS:bsdcat-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
            "BaseOS-8.2.0.Z.AUS:bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.i686",
            "BaseOS-8.2.0.Z.AUS:bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
            "BaseOS-8.2.0.Z.AUS:bsdtar-0:3.3.2-8.el8_2.1.x86_64",
            "BaseOS-8.2.0.Z.AUS:bsdtar-debuginfo-0:3.3.2-8.el8_2.1.i686",
            "BaseOS-8.2.0.Z.AUS:bsdtar-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
            "BaseOS-8.2.0.Z.AUS:libarchive-0:3.3.2-8.el8_2.1.i686",
            "BaseOS-8.2.0.Z.AUS:libarchive-0:3.3.2-8.el8_2.1.src",
            "BaseOS-8.2.0.Z.AUS:libarchive-0:3.3.2-8.el8_2.1.x86_64",
            "BaseOS-8.2.0.Z.AUS:libarchive-debuginfo-0:3.3.2-8.el8_2.1.i686",
            "BaseOS-8.2.0.Z.AUS:libarchive-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
            "BaseOS-8.2.0.Z.AUS:libarchive-debugsource-0:3.3.2-8.el8_2.1.i686",
            "BaseOS-8.2.0.Z.AUS:libarchive-debugsource-0:3.3.2-8.el8_2.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:14528"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.2.0.Z.AUS:bsdcat-debuginfo-0:3.3.2-8.el8_2.1.i686",
            "BaseOS-8.2.0.Z.AUS:bsdcat-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
            "BaseOS-8.2.0.Z.AUS:bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.i686",
            "BaseOS-8.2.0.Z.AUS:bsdcpio-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
            "BaseOS-8.2.0.Z.AUS:bsdtar-0:3.3.2-8.el8_2.1.x86_64",
            "BaseOS-8.2.0.Z.AUS:bsdtar-debuginfo-0:3.3.2-8.el8_2.1.i686",
            "BaseOS-8.2.0.Z.AUS:bsdtar-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
            "BaseOS-8.2.0.Z.AUS:libarchive-0:3.3.2-8.el8_2.1.i686",
            "BaseOS-8.2.0.Z.AUS:libarchive-0:3.3.2-8.el8_2.1.src",
            "BaseOS-8.2.0.Z.AUS:libarchive-0:3.3.2-8.el8_2.1.x86_64",
            "BaseOS-8.2.0.Z.AUS:libarchive-debuginfo-0:3.3.2-8.el8_2.1.i686",
            "BaseOS-8.2.0.Z.AUS:libarchive-debuginfo-0:3.3.2-8.el8_2.1.x86_64",
            "BaseOS-8.2.0.Z.AUS:libarchive-debugsource-0:3.3.2-8.el8_2.1.i686",
            "BaseOS-8.2.0.Z.AUS:libarchive-debugsource-0:3.3.2-8.el8_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2025-5914 (GCVE-0-2025-5914)

Tags

Sightings

Nomenclature