Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-5121 (GCVE-0-2026-5121)
Vulnerability from cvelistv5 – Published: 2026-03-30 07:47 – Updated: 2026-09-01 08:38
VLAI
EPSS
VEX
Title
Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing
Summary
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.
Severity
7.5 (High)
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-03-31 03:55 UTC
CWE
- CWE-190 - Integer Overflow or Wraparound
Assigner
References
37 references
Impacted products
51 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support |
Unaffected:
0:3.1.2-14.el7_9.2 , < *
(rpm)
cpe:/o:redhat:rhel_els:7 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:3.3.3-7.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8::crb cpe:/o:redhat:enterprise_linux:8::baseos |
||
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support |
Unaffected:
0:3.3.2-8.el8_2.2 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.2::baseos |
||
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
0:3.3.3-1.el8_4.2 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.4::baseos |
||
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
0:3.3.3-1.el8_4.2 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.4::baseos |
||
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
0:3.3.3-6.el8_6.1 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_e4s:8.6::baseos cpe:/o:redhat:rhel_tus:8.6::baseos |
||
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
0:3.3.3-6.el8_6.1 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_e4s:8.6::baseos cpe:/o:redhat:rhel_tus:8.6::baseos |
||
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
0:3.3.3-6.el8_6.1 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_e4s:8.6::baseos cpe:/o:redhat:rhel_tus:8.6::baseos |
||
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:3.3.3-5.el8_8.2 , < *
(rpm)
cpe:/o:redhat:rhel_e4s:8.8::baseos cpe:/o:redhat:rhel_tus:8.8::baseos |
||
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:3.3.3-5.el8_8.2 , < *
(rpm)
cpe:/o:redhat:rhel_e4s:8.8::baseos cpe:/o:redhat:rhel_tus:8.8::baseos |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:3.5.3-9.el9_7 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos |
||
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions |
Unaffected:
0:3.5.3-2.el9_0.4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.0::appstream cpe:/o:redhat:rhel_e4s:9.0::baseos |
||
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:3.5.3-5.el9_2.2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2::appstream cpe:/o:redhat:rhel_e4s:9.2::baseos |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
0:3.5.3-5.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4::appstream cpe:/a:redhat:rhel_eus:9.4::crb cpe:/o:redhat:rhel_eus:9.4::baseos |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:3.5.3-7.el9_6.1 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6::appstream cpe:/o:redhat:rhel_eus:9.6::baseos |
||
| Red Hat | Red Hat OpenShift Container Platform 4.12 |
Unaffected:
412.86.202604281506-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.12::el8 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.13 |
Unaffected:
413.92.202605271328-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.13::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.14 |
Unaffected:
414.92.202605060243-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.14::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.15 |
Unaffected:
415.92.202605060220-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.15::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.16 |
Unaffected:
416.94.202604211449-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.16::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
417.94.202605112123-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
418.94.202604240015-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
4.19.9.6.202605201155-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
||
| Red Hat | RHEL-8 based Middleware Containers |
Unaffected:
7.13.5-4.1777325677 , < *
(rpm)
cpe:/a:redhat:rhosemc:1.0::el8 |
||
| Red Hat | RHEL-8 based Middleware Containers |
Unaffected:
7.13.5-4.1777325711 , < *
(rpm)
cpe:/a:redhat:rhosemc:1.0::el8 |
||
| Red Hat | RHEL-8 based Middleware Containers |
Unaffected:
7.13.5-4.1777325710 , < *
(rpm)
cpe:/a:redhat:rhosemc:1.0::el8 |
||
| Red Hat | RHEL-8 based Middleware Containers |
Unaffected:
7.13.5-3.1777325680 , < *
(rpm)
cpe:/a:redhat:rhosemc:1.0::el8 |
||
| Red Hat | RHEL-8 based Middleware Containers |
Unaffected:
7.13.5-4.1777325709 , < *
(rpm)
cpe:/a:redhat:rhosemc:1.0::el8 |
||
| Red Hat | RHEL-8 based Middleware Containers |
Unaffected:
7.13.5-4.1777325680 , < *
(rpm)
cpe:/a:redhat:rhosemc:1.0::el8 |
||
| Red Hat | RHEL-8 based Middleware Containers |
Unaffected:
7.13.5-4.1777325708 , < *
(rpm)
cpe:/a:redhat:rhosemc:1.0::el8 |
||
| Red Hat | Red Hat AI Inference Server 3.2 |
Unaffected:
1779223654 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.2::el9 |
||
| Red Hat | Red Hat AI Inference Server 3.2 |
Unaffected:
1779223651 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.2::el9 |
||
| Red Hat | Red Hat AI Inference Server 3.2 |
Unaffected:
1780681984 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.2::el9 |
||
| Red Hat | Red Hat AI Inference Server 3.3 |
Unaffected:
1778244559 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.3::el9 |
||
| Red Hat | Red Hat AI Inference Server 3.3 |
Unaffected:
1778244531 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.3::el9 |
||
| Red Hat | Red Hat AI Inference Server 3.3 |
Unaffected:
1778274666 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.3::el9 |
||
| Red Hat | Red Hat AI Inference Server 3.3 |
Unaffected:
1778244546 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.3::el9 |
||
| Red Hat | Red Hat Discovery 2 |
Unaffected:
1778156756 , < *
(rpm)
cpe:/a:redhat:discovery:2::el9 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
3.8.7-1.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Insights proxy 1.5 |
Unaffected:
1776868961 , < *
(rpm)
cpe:/a:redhat:insights_proxy:1.5::el9 |
||
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1776868774 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
||
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1776868744 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
||
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1776868772 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
||
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1776868842 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
||
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1777459441 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
||
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1777454300 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
||
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1777459504 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10
|
||
| Red Hat | Red Hat Enterprise Linux 6 |
cpe:/o:redhat:enterprise_linux:6
|
||
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4
|
||
| Siemens | SIDIS Secured SmartPlug |
Affected:
0 , < V7.26.0310
(custom)
|
guessed |
Date Public
2026-03-30 07:44
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-5121",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-03-31T03:55:34.402717Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "CWE-190 Integer Overflow or Wraparound",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-31T13:52:02.886Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"defaultStatus": "unknown",
"product": "SIDIS Secured SmartPlug",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V7.26.0310",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-14T12:45:28.047Z",
"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
"shortName": "siemens-SADP"
},
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-585531.html"
}
],
"x_adpType": "supplier"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "libarchive",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.1.2-14.el7_9.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::crb",
"cpe:/o:redhat:enterprise_linux:8::baseos"
],
"defaultStatus": "affected",
"packageName": "libarchive",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.3.3-7.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.2::baseos"
],
"defaultStatus": "affected",
"packageName": "libarchive",
"product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.3.2-8.el8_2.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.4::baseos",
"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
],
"defaultStatus": "affected",
"packageName": "libarchive",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.3.3-1.el8_4.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.4::baseos",
"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
],
"defaultStatus": "affected",
"packageName": "libarchive",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.3.3-1.el8_4.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos",
"cpe:/o:redhat:rhel_e4s:8.6::baseos",
"cpe:/o:redhat:rhel_tus:8.6::baseos"
],
"defaultStatus": "affected",
"packageName": "libarchive",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.3.3-6.el8_6.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos",
"cpe:/o:redhat:rhel_e4s:8.6::baseos",
"cpe:/o:redhat:rhel_tus:8.6::baseos"
],
"defaultStatus": "affected",
"packageName": "libarchive",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.3.3-6.el8_6.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos",
"cpe:/o:redhat:rhel_e4s:8.6::baseos",
"cpe:/o:redhat:rhel_tus:8.6::baseos"
],
"defaultStatus": "affected",
"packageName": "libarchive",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.3.3-6.el8_6.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8::baseos",
"cpe:/o:redhat:rhel_tus:8.8::baseos"
],
"defaultStatus": "affected",
"packageName": "libarchive",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.3.3-5.el8_8.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8::baseos",
"cpe:/o:redhat:rhel_tus:8.8::baseos"
],
"defaultStatus": "affected",
"packageName": "libarchive",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.3.3-5.el8_8.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"defaultStatus": "affected",
"packageName": "libarchive",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.5.3-9.el9_7",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"defaultStatus": "affected",
"packageName": "libarchive",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.5.3-9.el9_7",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0::appstream",
"cpe:/o:redhat:rhel_e4s:9.0::baseos"
],
"defaultStatus": "affected",
"packageName": "libarchive",
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.5.3-2.el9_0.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream",
"cpe:/o:redhat:rhel_e4s:9.2::baseos"
],
"defaultStatus": "affected",
"packageName": "libarchive",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.5.3-5.el9_2.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::appstream",
"cpe:/a:redhat:rhel_eus:9.4::crb",
"cpe:/o:redhat:rhel_eus:9.4::baseos"
],
"defaultStatus": "affected",
"packageName": "libarchive",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.5.3-5.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::appstream",
"cpe:/o:redhat:rhel_eus:9.6::baseos"
],
"defaultStatus": "affected",
"packageName": "libarchive",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.5.3-7.el9_6.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.12::el8"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "412.86.202604281506-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "413.92.202605271328-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "414.92.202605060243-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.15::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "415.92.202605060220-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "416.94.202604211449-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "417.94.202605112123-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "418.94.202604240015-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.19.9.6.202605201155-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"defaultStatus": "affected",
"packageName": "rhpam-7/rhpam-businesscentral-monitoring-rhel8",
"product": "RHEL-8 based Middleware Containers",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "7.13.5-4.1777325677",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"defaultStatus": "affected",
"packageName": "rhpam-7/rhpam-businesscentral-rhel8",
"product": "RHEL-8 based Middleware Containers",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "7.13.5-4.1777325711",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"defaultStatus": "affected",
"packageName": "rhpam-7/rhpam-controller-rhel8",
"product": "RHEL-8 based Middleware Containers",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "7.13.5-4.1777325710",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"defaultStatus": "affected",
"packageName": "rhpam-7/rhpam-dashbuilder-rhel8",
"product": "RHEL-8 based Middleware Containers",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "7.13.5-3.1777325680",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"defaultStatus": "affected",
"packageName": "rhpam-7/rhpam-kieserver-rhel8",
"product": "RHEL-8 based Middleware Containers",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "7.13.5-4.1777325709",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"defaultStatus": "affected",
"packageName": "rhpam-7/rhpam-process-migration-rhel8",
"product": "RHEL-8 based Middleware Containers",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "7.13.5-4.1777325680",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"defaultStatus": "affected",
"packageName": "rhpam-7/rhpam-smartrouter-rhel8",
"product": "RHEL-8 based Middleware Containers",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "7.13.5-4.1777325708",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-cuda-rhel9",
"product": "Red Hat AI Inference Server 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779223654",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-rocm-rhel9",
"product": "Red Hat AI Inference Server 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779223651",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/model-opt-cuda-rhel9",
"product": "Red Hat AI Inference Server 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780681984",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/model-opt-cuda-rhel9",
"product": "Red Hat AI Inference Server 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778244559",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-rocm-rhel9",
"product": "Red Hat AI Inference Server 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778244531",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-cuda-rhel9",
"product": "Red Hat AI Inference Server 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778274666",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-spyre-rhel9",
"product": "Red Hat AI Inference Server 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778244546",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"defaultStatus": "affected",
"packageName": "discovery/discovery-ui-rhel9",
"product": "Red Hat Discovery 2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778156756",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "libarchive-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "3.8.7-1.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:insights_proxy:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "insights-proxy/insights-proxy-container-rhel9",
"product": "Red Hat Insights proxy 1.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776868961",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/cds-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776868774",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/haproxy-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776868744",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/installer-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776868772",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/rhua-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776868842",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/cds-kubernetes-tp-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777459441",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/installer-tp-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777454300",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/rhua-tp-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777459504",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unknown",
"packageName": "libarchive",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "unknown",
"packageName": "libarchive",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unknown",
"packageName": "openshift/ose-rhel-coreos-9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
}
],
"credits": [
{
"lang": "en",
"value": "Red Hat would like to thank Elhanan Haenel for reporting this issue."
}
],
"datePublic": "2026-03-30T07:44:15.222Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Moderate"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "Integer Overflow or Wraparound",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-01T08:38:36.825Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "RHSA-2026:10065",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
},
{
"name": "RHSA-2026:10097",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10097"
},
{
"name": "RHSA-2026:11768",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11768"
},
{
"name": "RHSA-2026:12071",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12071"
},
{
"name": "RHSA-2026:12274",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12274"
},
{
"name": "RHSA-2026:13812",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13812"
},
{
"name": "RHSA-2026:14773",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14773"
},
{
"name": "RHSA-2026:14937",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14937"
},
{
"name": "RHSA-2026:15087",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:15087"
},
{
"name": "RHSA-2026:16008",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16008"
},
{
"name": "RHSA-2026:16009",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"name": "RHSA-2026:16030",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16030"
},
{
"name": "RHSA-2026:16174",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16174"
},
{
"name": "RHSA-2026:17596",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17596"
},
{
"name": "RHSA-2026:19724",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19724"
},
{
"name": "RHSA-2026:19725",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19725"
},
{
"name": "RHSA-2026:20040",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20040"
},
{
"name": "RHSA-2026:21690",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21690"
},
{
"name": "RHSA-2026:25096",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25096"
},
{
"name": "RHSA-2026:8510",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8510"
},
{
"name": "RHSA-2026:8517",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8517"
},
{
"name": "RHSA-2026:8521",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8521"
},
{
"name": "RHSA-2026:8534",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8534"
},
{
"name": "RHSA-2026:8864",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8864"
},
{
"name": "RHSA-2026:8866",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8866"
},
{
"name": "RHSA-2026:8867",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8867"
},
{
"name": "RHSA-2026:8873",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8873"
},
{
"name": "RHSA-2026:8908",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8908"
},
{
"name": "RHSA-2026:8944",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8944"
},
{
"name": "RHSA-2026:9026",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9026"
},
{
"name": "RHSA-2026:9592",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9592"
},
{
"name": "RHSA-2026:9832",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9832"
},
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-5121"
},
{
"name": "RHBZ#2452945",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452945"
},
{
"url": "https://github.com/advisories/GHSA-2vwv-vqpv-v8vc"
},
{
"url": "https://github.com/libarchive/libarchive/pull/2934"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-03-30T07:40:25.358Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-03-30T07:44:15.222Z",
"value": "Made public."
}
],
"title": "Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing",
"workarounds": [
{
"lang": "en",
"value": "To mitigate this issue, avoid processing untrusted ISO9660 images with applications that utilize `libarchive`. Users should only extract or read content from ISO images obtained from trusted sources."
}
],
"x_generator": {
"engine": "cvelib 1.8.0"
},
"x_redhatCweChain": "CWE-190: Integer Overflow or Wraparound"
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2026-5121",
"datePublished": "2026-03-30T07:47:28.562Z",
"dateReserved": "2026-03-30T07:39:27.352Z",
"dateUpdated": "2026-09-01T08:38:36.825Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-5121",
"date": "2026-09-06",
"epss": "0.01073",
"percentile": "0.62697"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-5121\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2026-03-30T08:16:18.780\",\"lastModified\":\"2026-09-01T09:16:45.693\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.\"},{\"lang\":\"es\",\"value\":\"Se encontr\u00f3 un fallo en libarchive. En sistemas de 32 bits, existe una vulnerabilidad de desbordamiento de entero en la l\u00f3gica de asignaci\u00f3n de punteros de bloque zisofs. Un atacante remoto puede explotar esto al proporcionar una imagen ISO9660 especialmente dise\u00f1ada, lo que puede llevar a un desbordamiento de b\u00fafer de pila. Esto podr\u00eda permitir potencialmente la ejecuci\u00f3n de c\u00f3digo arbitrario en el sistema afectado.\"}],\"affected\":[{\"source\":\"secalert@redhat.com\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libarchive\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:3.1.2-14.el7_9.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libarchive\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::crb\",\"cpe:/o:redhat:enterprise_linux:8::baseos\"],\"versions\":[{\"version\":\"0:3.3.3-7.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.2 Advanced Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libarchive\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.2::baseos\"],\"versions\":[{\"version\":\"0:3.3.2-8.el8_2.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libarchive\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.4::baseos\",\"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos\"],\"versions\":[{\"version\":\"0:3.3.3-1.el8_4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libarchive\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.4::baseos\",\"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos\"],\"versions\":[{\"version\":\"0:3.3.3-1.el8_4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libarchive\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.6::baseos\",\"cpe:/o:redhat:rhel_e4s:8.6::baseos\",\"cpe:/o:redhat:rhel_tus:8.6::baseos\"],\"versions\":[{\"version\":\"0:3.3.3-6.el8_6.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libarchive\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.6::baseos\",\"cpe:/o:redhat:rhel_e4s:8.6::baseos\",\"cpe:/o:redhat:rhel_tus:8.6::baseos\"],\"versions\":[{\"version\":\"0:3.3.3-6.el8_6.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libarchive\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.6::baseos\",\"cpe:/o:redhat:rhel_e4s:8.6::baseos\",\"cpe:/o:redhat:rhel_tus:8.6::baseos\"],\"versions\":[{\"version\":\"0:3.3.3-6.el8_6.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libarchive\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:8.8::baseos\",\"cpe:/o:redhat:rhel_tus:8.8::baseos\"],\"versions\":[{\"version\":\"0:3.3.3-5.el8_8.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libarchive\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:8.8::baseos\",\"cpe:/o:redhat:rhel_tus:8.8::baseos\"],\"versions\":[{\"version\":\"0:3.3.3-5.el8_8.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libarchive\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\",\"cpe:/o:redhat:enterprise_linux:9::baseos\"],\"versions\":[{\"version\":\"0:3.5.3-9.el9_7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libarchive\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\",\"cpe:/o:redhat:enterprise_linux:9::baseos\"],\"versions\":[{\"version\":\"0:3.5.3-9.el9_7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libarchive\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0::appstream\",\"cpe:/o:redhat:rhel_e4s:9.0::baseos\"],\"versions\":[{\"version\":\"0:3.5.3-2.el9_0.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libarchive\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::appstream\",\"cpe:/o:redhat:rhel_e4s:9.2::baseos\"],\"versions\":[{\"version\":\"0:3.5.3-5.el9_2.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libarchive\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4::appstream\",\"cpe:/a:redhat:rhel_eus:9.4::crb\",\"cpe:/o:redhat:rhel_eus:9.4::baseos\"],\"versions\":[{\"version\":\"0:3.5.3-5.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libarchive\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::appstream\",\"cpe:/o:redhat:rhel_eus:9.6::baseos\"],\"versions\":[{\"version\":\"0:3.5.3-7.el9_6.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.12::el8\"],\"versions\":[{\"version\":\"412.86.202604281506-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.13::el9\"],\"versions\":[{\"version\":\"413.92.202605271328-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.14::el9\"],\"versions\":[{\"version\":\"414.92.202605060243-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.15::el9\"],\"versions\":[{\"version\":\"415.92.202605060220-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.16::el9\"],\"versions\":[{\"version\":\"416.94.202604211449-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"],\"versions\":[{\"version\":\"417.94.202605112123-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"],\"versions\":[{\"version\":\"418.94.202604240015-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"4.19.9.6.202605201155-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEL-8 based Middleware Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhpam-7/rhpam-businesscentral-monitoring-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhosemc:1.0::el8\"],\"versions\":[{\"version\":\"7.13.5-4.1777325677\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEL-8 based Middleware Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhpam-7/rhpam-businesscentral-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhosemc:1.0::el8\"],\"versions\":[{\"version\":\"7.13.5-4.1777325711\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEL-8 based Middleware Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhpam-7/rhpam-controller-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhosemc:1.0::el8\"],\"versions\":[{\"version\":\"7.13.5-4.1777325710\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEL-8 based Middleware Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhpam-7/rhpam-dashbuilder-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhosemc:1.0::el8\"],\"versions\":[{\"version\":\"7.13.5-3.1777325680\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEL-8 based Middleware Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhpam-7/rhpam-kieserver-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhosemc:1.0::el8\"],\"versions\":[{\"version\":\"7.13.5-4.1777325709\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEL-8 based Middleware Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhpam-7/rhpam-process-migration-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhosemc:1.0::el8\"],\"versions\":[{\"version\":\"7.13.5-4.1777325680\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEL-8 based Middleware Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhpam-7/rhpam-smartrouter-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhosemc:1.0::el8\"],\"versions\":[{\"version\":\"7.13.5-4.1777325708\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/vllm-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.2::el9\"],\"versions\":[{\"version\":\"1779223654\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/vllm-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.2::el9\"],\"versions\":[{\"version\":\"1779223651\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/model-opt-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.2::el9\"],\"versions\":[{\"version\":\"1780681984\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/model-opt-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.3::el9\"],\"versions\":[{\"version\":\"1778244559\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/vllm-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.3::el9\"],\"versions\":[{\"version\":\"1778244531\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/vllm-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.3::el9\"],\"versions\":[{\"version\":\"1778274666\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/vllm-spyre-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.3::el9\"],\"versions\":[{\"version\":\"1778244546\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Discovery 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"discovery/discovery-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:discovery:2::el9\"],\"versions\":[{\"version\":\"1778156756\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"libarchive-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"3.8.7-1.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Insights proxy 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"insights-proxy/insights-proxy-container-rhel9\",\"cpes\":[\"cpe:/a:redhat:insights_proxy:1.5::el9\"],\"versions\":[{\"version\":\"1776868961\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/cds-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1776868774\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/haproxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1776868744\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1776868772\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/rhua-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1776868842\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/cds-kubernetes-tp-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1777459441\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/installer-tp-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1777454300\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/rhua-tp-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1777459504\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libarchive\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libarchive\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/ose-rhel-coreos-9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]}]},{\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\",\"affectedData\":[{\"vendor\":\"Siemens\",\"product\":\"SIDIS Secured SmartPlug\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V7.26.0310\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-03-31T03:55:34.402717Z\",\"id\":\"CVE-2026-5121\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-190\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-190\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libarchive:libarchive:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A51945D-40D7-4C28-B0BB-774687265DCE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"87DEB507-5B64-47D7-9A50-3B87FD1E571F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"932D137F-528B-4526-9A89-CD59FA1AB0FE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4CFF558-3C47-480D-A2F0-BABF26042943\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F6FB57C-2BC7-487C-96DD-132683AEB35D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D65C2163-CFC2-4ABB-8F4E-CB09CEBD006C\"}]}]}],\"references\":[{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10065\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10097\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11768\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12071\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12274\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13812\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14773\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14937\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:15087\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16008\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16009\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16030\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16174\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17596\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19724\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19725\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20040\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21690\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25096\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8510\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8517\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8521\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8534\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8864\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8866\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8867\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8873\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8908\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8944\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9026\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9592\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9832\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-5121\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2452945\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://github.com/advisories/GHSA-2vwv-vqpv-v8vc\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/libarchive/libarchive/pull/2934\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-585531.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"}]}}",
"redhat_vex": {
"aggregate_severity": "Moderate",
"current_release_date": "2026-09-01T08:38:32+00:00",
"cve": "CVE-2026-5121",
"id": "CVE-2026-5121",
"initial_release_date": "2026-03-30T07:44:15.222000+00:00",
"product_status:fixed": "612",
"product_status:known_not_affected": "3",
"product_status:under_investigation": "8",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5121.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-09-05T00:35:22Z",
"cve": "CVE-2026-5121",
"id": "CVE-2026-5121",
"initial_release_date": "2026-03-31T23:28:47Z",
"product_status:known_affected": "458",
"product_status:known_not_affected": "51",
"product_status:recommended": "78",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-5121",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-5121.json",
"version": "20"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"affected\": [{\"vendor\": \"Siemens\", \"product\": \"SIDIS Secured SmartPlug\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V7.26.0310\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"x_adpType\": \"supplier\", \"references\": [{\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-585531.html\"}], \"providerMetadata\": {\"orgId\": \"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\", \"shortName\": \"siemens-SADP\", \"dateUpdated\": \"2026-07-14T12:45:28.047Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-5121\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-31T03:55:34.402717Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-190\", \"description\": \"CWE-190 Integer Overflow or Wraparound\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-03-31T13:51:59.651Z\"}}], \"cna\": {\"title\": \"Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing\", \"credits\": [{\"lang\": \"en\", \"value\": \"Red Hat would like to thank Elhanan Haenel for reporting this issue.\"}], \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Moderate\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.1.2-14.el7_9.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::crb\", \"cpe:/o:redhat:enterprise_linux:8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.3-7.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.2::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.2 Advanced Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.2-8.el8_2.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.4::baseos\", \"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.3-1.el8_4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.4::baseos\", \"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.3-1.el8_4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/o:redhat:rhel_e4s:8.6::baseos\", \"cpe:/o:redhat:rhel_tus:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.3-6.el8_6.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/o:redhat:rhel_e4s:8.6::baseos\", \"cpe:/o:redhat:rhel_tus:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.3-6.el8_6.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/o:redhat:rhel_e4s:8.6::baseos\", \"cpe:/o:redhat:rhel_tus:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.3-6.el8_6.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:8.8::baseos\", \"cpe:/o:redhat:rhel_tus:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.3-5.el8_8.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:8.8::baseos\", \"cpe:/o:redhat:rhel_tus:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.3-5.el8_8.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/o:redhat:enterprise_linux:9::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.5.3-9.el9_7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/o:redhat:enterprise_linux:9::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.5.3-9.el9_7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\", \"cpe:/o:redhat:rhel_e4s:9.0::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.5.3-2.el9_0.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\", \"cpe:/o:redhat:rhel_e4s:9.2::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.5.3-5.el9_2.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\", \"cpe:/a:redhat:rhel_eus:9.4::crb\", \"cpe:/o:redhat:rhel_eus:9.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.5.3-5.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::appstream\", \"cpe:/o:redhat:rhel_eus:9.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.5.3-7.el9_6.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.12::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"412.86.202604281506-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"413.92.202605271328-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"414.92.202605060243-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"415.92.202605060220-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"416.94.202604211449-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"417.94.202605112123-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"418.94.202604240015-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.19.9.6.202605201155-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhosemc:1.0::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHEL-8 based Middleware Containers\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7.13.5-4.1777325677\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhpam-7/rhpam-businesscentral-monitoring-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhosemc:1.0::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHEL-8 based Middleware Containers\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7.13.5-4.1777325711\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhpam-7/rhpam-businesscentral-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhosemc:1.0::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHEL-8 based Middleware Containers\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7.13.5-4.1777325710\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhpam-7/rhpam-controller-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhosemc:1.0::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHEL-8 based Middleware Containers\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7.13.5-3.1777325680\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhpam-7/rhpam-dashbuilder-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhosemc:1.0::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHEL-8 based Middleware Containers\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7.13.5-4.1777325709\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhpam-7/rhpam-kieserver-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhosemc:1.0::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHEL-8 based Middleware Containers\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7.13.5-4.1777325680\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhpam-7/rhpam-process-migration-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhosemc:1.0::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHEL-8 based Middleware Containers\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7.13.5-4.1777325708\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhpam-7/rhpam-smartrouter-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779223654\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/vllm-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779223651\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/vllm-rocm-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780681984\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/model-opt-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778244559\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/model-opt-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778244531\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/vllm-rocm-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778274666\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/vllm-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778244546\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/vllm-spyre-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778156756\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"discovery/discovery-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"3.8.7-1.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libarchive-main\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:insights_proxy:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Insights proxy 1.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776868961\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"insights-proxy/insights-proxy-container-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776868774\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/cds-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776868744\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/haproxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776868772\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/installer-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776868842\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/rhua-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777459441\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/cds-kubernetes-tp-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777454300\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/installer-tp-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777459504\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/rhua-tp-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"packageName\": \"libarchive\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift/ose-rhel-coreos-9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-30T07:40:25.358Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-03-30T07:44:15.222Z\", \"value\": \"Made public.\"}], \"datePublic\": \"2026-03-30T07:44:15.222Z\", \"references\": [{\"url\": \"https://access.redhat.com/errata/RHSA-2026:10065\", \"name\": \"RHSA-2026:10065\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10097\", \"name\": \"RHSA-2026:10097\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11768\", \"name\": \"RHSA-2026:11768\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12071\", \"name\": \"RHSA-2026:12071\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12274\", \"name\": \"RHSA-2026:12274\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13812\", \"name\": \"RHSA-2026:13812\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14773\", \"name\": \"RHSA-2026:14773\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14937\", \"name\": \"RHSA-2026:14937\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:15087\", \"name\": \"RHSA-2026:15087\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16008\", \"name\": \"RHSA-2026:16008\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16009\", \"name\": \"RHSA-2026:16009\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16030\", \"name\": \"RHSA-2026:16030\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16174\", \"name\": \"RHSA-2026:16174\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17596\", \"name\": \"RHSA-2026:17596\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19724\", \"name\": \"RHSA-2026:19724\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19725\", \"name\": \"RHSA-2026:19725\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20040\", \"name\": \"RHSA-2026:20040\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21690\", \"name\": \"RHSA-2026:21690\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25096\", \"name\": \"RHSA-2026:25096\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8510\", \"name\": \"RHSA-2026:8510\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8517\", \"name\": \"RHSA-2026:8517\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8521\", \"name\": \"RHSA-2026:8521\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8534\", \"name\": \"RHSA-2026:8534\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8864\", \"name\": \"RHSA-2026:8864\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8866\", \"name\": \"RHSA-2026:8866\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8867\", \"name\": \"RHSA-2026:8867\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8873\", \"name\": \"RHSA-2026:8873\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8908\", \"name\": \"RHSA-2026:8908\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8944\", \"name\": \"RHSA-2026:8944\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9026\", \"name\": \"RHSA-2026:9026\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9592\", \"name\": \"RHSA-2026:9592\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9832\", \"name\": \"RHSA-2026:9832\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/security/cve/CVE-2026-5121\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2452945\", \"name\": \"RHBZ#2452945\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://github.com/advisories/GHSA-2vwv-vqpv-v8vc\"}, {\"url\": \"https://github.com/libarchive/libarchive/pull/2934\"}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"To mitigate this issue, avoid processing untrusted ISO9660 images with applications that utilize `libarchive`. Users should only extract or read content from ISO images obtained from trusted sources.\"}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-190\", \"description\": \"Integer Overflow or Wraparound\"}]}], \"providerMetadata\": {\"orgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"shortName\": \"redhat\", \"dateUpdated\": \"2026-09-01T08:38:36.825Z\"}, \"x_redhatCweChain\": \"CWE-190: Integer Overflow or Wraparound\"}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-5121\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-01T08:38:36.825Z\", \"dateReserved\": \"2026-03-30T07:39:27.352Z\", \"assignerOrgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"datePublished\": \"2026-03-30T07:47:28.562Z\", \"assignerShortName\": \"redhat\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:9592
Vulnerability from csaf_redhat - Published: 2026-04-22 06:02 - Updated: 2026-09-01 08:48Summary
Red Hat Security Advisory: libarchive security update
Severity
Important
Notes
Topic: An update for libarchive is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.
Security Fix(es):
* libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing (CVE-2026-4424)
* libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing (CVE-2026-5121)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.
7.5 (High)
Affected products
Fixed
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:bsdtar-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.
7.5 (High)
Affected products
Fixed
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:bsdtar-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
16 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for libarchive is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.\n\nSecurity Fix(es):\n\n* libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing (CVE-2026-4424)\n\n* libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing (CVE-2026-5121)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:9592",
"url": "https://access.redhat.com/errata/RHSA-2026:9592"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2449006",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449006"
},
{
"category": "external",
"summary": "2452945",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452945"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9592.json"
}
],
"title": "Red Hat Security Advisory: libarchive security update",
"tracking": {
"current_release_date": "2026-09-01T08:48:15+00:00",
"generator": {
"date": "2026-09-01T08:48:15+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:9592",
"initial_release_date": "2026-04-22T06:02:52+00:00",
"revision_history": [
{
"date": "2026-04-22T06:02:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-22T06:02:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-01T08:48:15+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:8.4::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.EUS.EXTENSION",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"product": {
"name": "bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"product_id": "bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdtar@3.3.3-1.el8_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libarchive-0:3.3.3-1.el8_4.2.x86_64",
"product": {
"name": "libarchive-0:3.3.3-1.el8_4.2.x86_64",
"product_id": "libarchive-0:3.3.3-1.el8_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive@3.3.3-1.el8_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64",
"product": {
"name": "libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64",
"product_id": "libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive-debugsource@3.3.3-1.el8_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"product": {
"name": "bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"product_id": "bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.3.3-1.el8_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"product": {
"name": "bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"product_id": "bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.3.3-1.el8_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"product": {
"name": "bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"product_id": "bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.3.3-1.el8_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"product": {
"name": "libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"product_id": "libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive-debuginfo@3.3.3-1.el8_4.2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "libarchive-0:3.3.3-1.el8_4.2.i686",
"product": {
"name": "libarchive-0:3.3.3-1.el8_4.2.i686",
"product_id": "libarchive-0:3.3.3-1.el8_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive@3.3.3-1.el8_4.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"product": {
"name": "libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"product_id": "libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive-debugsource@3.3.3-1.el8_4.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"product": {
"name": "bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"product_id": "bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.3.3-1.el8_4.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"product": {
"name": "bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"product_id": "bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.3.3-1.el8_4.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"product": {
"name": "bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"product_id": "bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.3.3-1.el8_4.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"product": {
"name": "libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"product_id": "libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive-debuginfo@3.3.3-1.el8_4.2?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "libarchive-0:3.3.3-1.el8_4.2.src",
"product": {
"name": "libarchive-0:3.3.3-1.el8_4.2.src",
"product_id": "libarchive-0:3.3.3-1.el8_4.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive@3.3.3-1.el8_4.2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686"
},
"product_reference": "bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64"
},
"product_reference": "bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686"
},
"product_reference": "bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64"
},
"product_reference": "bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-0:3.3.3-1.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:bsdtar-0:3.3.3-1.el8_4.2.x86_64"
},
"product_reference": "bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686"
},
"product_reference": "bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64"
},
"product_reference": "bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-0:3.3.3-1.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.i686"
},
"product_reference": "libarchive-0:3.3.3-1.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-0:3.3.3-1.el8_4.2.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.src"
},
"product_reference": "libarchive-0:3.3.3-1.el8_4.2.src",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-0:3.3.3-1.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.x86_64"
},
"product_reference": "libarchive-0:3.3.3-1.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686"
},
"product_reference": "libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64"
},
"product_reference": "libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debugsource-0:3.3.3-1.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686"
},
"product_reference": "libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64"
},
"product_reference": "libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686"
},
"product_reference": "bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64"
},
"product_reference": "bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686"
},
"product_reference": "bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64"
},
"product_reference": "bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-0:3.3.3-1.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-0:3.3.3-1.el8_4.2.x86_64"
},
"product_reference": "bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686"
},
"product_reference": "bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64"
},
"product_reference": "bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-0:3.3.3-1.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.i686"
},
"product_reference": "libarchive-0:3.3.3-1.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-0:3.3.3-1.el8_4.2.src as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.src"
},
"product_reference": "libarchive-0:3.3.3-1.el8_4.2.src",
"relates_to_product_reference": "BaseOS-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-0:3.3.3-1.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.x86_64"
},
"product_reference": "libarchive-0:3.3.3-1.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686"
},
"product_reference": "libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64"
},
"product_reference": "libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debugsource-0:3.3.3-1.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686"
},
"product_reference": "libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64"
},
"product_reference": "libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.EUS.EXTENSION"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Elhanan Haenel"
]
}
],
"cve": "CVE-2026-4424",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-03-19T12:22:21.740000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449006"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT: This heap out-of-bounds read vulnerability in libarchive\u0027s RAR archive processing logic can lead to information disclosure. A remote attacker can exploit this flaw by providing a specially crafted RAR archive, potentially revealing sensitive heap memory information without requiring authentication or user interaction on systems that process untrusted archives.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.src",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.src",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4424"
},
{
"category": "external",
"summary": "RHBZ#2449006",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449006"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4424",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4424"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4424",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4424"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/2898",
"url": "https://github.com/libarchive/libarchive/pull/2898"
}
],
"release_date": "2026-03-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T06:02:52+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.src",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.src",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9592"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.src",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.src",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.src",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.src",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing"
},
{
"acknowledgments": [
{
"names": [
"Elhanan Haenel"
]
}
],
"cve": "CVE-2026-5121",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-03-30T07:40:25.358335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452945"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: An integer overflow flaw in `libarchive` on 32-bit systems can lead to a heap buffer overflow. This vulnerability occurs when processing a specially crafted ISO9660 image, allowing an attacker to potentially execute arbitrary code. Red Hat Enterprise Linux 64-bit systems are not affected by this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.src",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.src",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5121"
},
{
"category": "external",
"summary": "RHBZ#2452945",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452945"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5121",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5121"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-2vwv-vqpv-v8vc",
"url": "https://github.com/advisories/GHSA-2vwv-vqpv-v8vc"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/2934",
"url": "https://github.com/libarchive/libarchive/pull/2934"
}
],
"release_date": "2026-03-30T07:44:15.222000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T06:02:52+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.src",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.src",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9592"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing untrusted ISO9660 images with applications that utilize `libarchive`. Users should only extract or read content from ISO images obtained from trusted sources.",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.src",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.src",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.src",
"BaseOS-8.4.0.Z.AUS:libarchive-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcat-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdcpio-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:bsdtar-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.src",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debuginfo-0:3.3.3-1.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.i686",
"BaseOS-8.4.0.Z.EUS.EXTENSION:libarchive-debugsource-0:3.3.3-1.el8_4.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing"
}
]
}
RHSA-2026:9832
Vulnerability from csaf_redhat - Published: 2026-04-22 17:32 - Updated: 2026-09-06 04:49Summary
Red Hat Security Advisory: Insights proxy Container Image
Severity
Important
Notes
Topic: Initial GA Release of Red Hat Insights proxy
Details: The Insights proxy Container is used by the Insights proxy product RPM
and serves as an intermediary between cystomer systems in disconnected networks,
air-gapped systems or systems with no outside connections and Insights.
The Insights proxy routes all Red Hat Insights traffic through itself, providing
a layer of privary and security for disconnected customer systems.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Vim, an open source, command line text editor. This heap buffer overflow vulnerability exists in the tag file resolution logic when processing the 'helpfile' option. A local user could exploit this by providing a specially crafted 'helpfile' option value, leading to a heap buffer overflow. This could result in arbitrary code execution or a denial of service.
7.3 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Vim, an open-source command-line text editor. Specifically, an operating system (OS) command injection vulnerability exists in the `netrw` standard plugin. A remote attacker could exploit this by tricking a user into opening a specially crafted URL, such as one using the `scp://` protocol handler. Successful exploitation allows the attacker to execute arbitrary shell commands with the same privileges as the Vim process, leading to potential system compromise.
4.4 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Vim. This vulnerability, a heap-buffer-overflow and a segmentation fault, exists in the swap file recovery logic. A local attacker could exploit this by providing a specially crafted swap file. This could lead to a denial of service (DoS) or potentially information disclosure.
5.3 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Vim. By including a newline character in a pattern passed to Vim's glob() function, an attacker may be able to execute arbitrary shell commands. This command injection vulnerability allows for arbitrary code execution, depending on the user's shell settings.
7.3 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
61 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Initial GA Release of Red Hat Insights proxy",
"title": "Topic"
},
{
"category": "general",
"text": "The Insights proxy Container is used by the Insights proxy product RPM\nand serves as an intermediary between cystomer systems in disconnected networks,\nair-gapped systems or systems with no outside connections and Insights.\n\nThe Insights proxy routes all Red Hat Insights traffic through itself, providing\na layer of privary and security for disconnected customer systems.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:9832",
"url": "https://access.redhat.com/errata/RHSA-2026:9832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25749",
"url": "https://access.redhat.com/security/cve/CVE-2026-25749"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27135",
"url": "https://access.redhat.com/security/cve/CVE-2026-27135"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28417",
"url": "https://access.redhat.com/security/cve/CVE-2026-28417"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28421",
"url": "https://access.redhat.com/security/cve/CVE-2026-28421"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33412",
"url": "https://access.redhat.com/security/cve/CVE-2026-33412"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4111",
"url": "https://access.redhat.com/security/cve/CVE-2026-4111"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4424",
"url": "https://access.redhat.com/security/cve/CVE-2026-4424"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5121",
"url": "https://access.redhat.com/security/cve/CVE-2026-5121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9832.json"
}
],
"title": "Red Hat Security Advisory: Insights proxy Container Image",
"tracking": {
"current_release_date": "2026-09-06T04:49:18+00:00",
"generator": {
"date": "2026-09-06T04:49:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:9832",
"initial_release_date": "2026-04-22T17:32:43+00:00",
"revision_history": [
{
"date": "2026-04-22T17:32:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-04T00:36:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-06T04:49:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Insights proxy 1.5",
"product": {
"name": "Red Hat Insights proxy 1.5",
"product_id": "Red Hat Insights proxy 1.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:insights_proxy:1.5::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Insights proxy"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"product": {
"name": "registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"product_id": "registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"product_identification_helper": {
"purl": "pkg:oci/insights-proxy-container-rhel9@sha256%3A16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42?arch=amd64\u0026repository_url=registry.redhat.io/insights-proxy\u0026tag=1776868961"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64",
"product": {
"name": "registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64",
"product_id": "registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/insights-proxy-container-rhel9@sha256%3Ac2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6?arch=arm64\u0026repository_url=registry.redhat.io/insights-proxy\u0026tag=1776868961"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64 as a component of Red Hat Insights proxy 1.5",
"product_id": "Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64"
},
"product_reference": "registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"relates_to_product_reference": "Red Hat Insights proxy 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64 as a component of Red Hat Insights proxy 1.5",
"product_id": "Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
},
"product_reference": "registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64",
"relates_to_product_reference": "Red Hat Insights proxy 1.5"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Elhanan Haenel"
]
}
],
"cve": "CVE-2026-4111",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-11T11:18:51.609000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446453"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team would likely assess the severity of this vulnerability as High because it allows remote attackers to cause a persistent denial-of-service condition using a small crafted archive file. Successful exploitation requires no authentication, no special configuration, and no user interaction in environments that automatically process uploaded archives. By repeatedly submitting malicious archives, an attacker can exhaust CPU resources or worker threads in services such as file upload systems, CI/CD pipelines, mail scanners, and content indexing services that rely on libarchive for archive extraction.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4111"
},
{
"category": "external",
"summary": "RHBZ#2446453",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446453"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4111",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4111"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4111",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4111"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/2877",
"url": "https://github.com/libarchive/libarchive/pull/2877"
}
],
"release_date": "2026-03-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T17:32:43+00:00",
"details": "The Insights proxy container image provided here is downloaded by the Red Hat\nInsights proxy product RPM.\n\nBefore applying this update, make sure all previously released errata relevant to\nyour system have been applied.",
"product_ids": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9832"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive"
},
{
"acknowledgments": [
{
"names": [
"Elhanan Haenel"
]
}
],
"cve": "CVE-2026-4424",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-03-19T12:22:21.740000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449006"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT: This heap out-of-bounds read vulnerability in libarchive\u0027s RAR archive processing logic can lead to information disclosure. A remote attacker can exploit this flaw by providing a specially crafted RAR archive, potentially revealing sensitive heap memory information without requiring authentication or user interaction on systems that process untrusted archives.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4424"
},
{
"category": "external",
"summary": "RHBZ#2449006",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449006"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4424",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4424"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4424",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4424"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/2898",
"url": "https://github.com/libarchive/libarchive/pull/2898"
}
],
"release_date": "2026-03-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T17:32:43+00:00",
"details": "The Insights proxy container image provided here is downloaded by the Red Hat\nInsights proxy product RPM.\n\nBefore applying this update, make sure all previously released errata relevant to\nyour system have been applied.",
"product_ids": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9832"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing"
},
{
"acknowledgments": [
{
"names": [
"Elhanan Haenel"
]
}
],
"cve": "CVE-2026-5121",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-03-30T07:40:25.358335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452945"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: An integer overflow flaw in `libarchive` on 32-bit systems can lead to a heap buffer overflow. This vulnerability occurs when processing a specially crafted ISO9660 image, allowing an attacker to potentially execute arbitrary code. Red Hat Enterprise Linux 64-bit systems are not affected by this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5121"
},
{
"category": "external",
"summary": "RHBZ#2452945",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452945"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5121",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5121"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-2vwv-vqpv-v8vc",
"url": "https://github.com/advisories/GHSA-2vwv-vqpv-v8vc"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/2934",
"url": "https://github.com/libarchive/libarchive/pull/2934"
}
],
"release_date": "2026-03-30T07:44:15.222000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T17:32:43+00:00",
"details": "The Insights proxy container image provided here is downloaded by the Red Hat\nInsights proxy product RPM.\n\nBefore applying this update, make sure all previously released errata relevant to\nyour system have been applied.",
"product_ids": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9832"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing untrusted ISO9660 images with applications that utilize `libarchive`. Users should only extract or read content from ISO images obtained from trusted sources.",
"product_ids": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing"
},
{
"cve": "CVE-2026-25749",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-02-09T11:08:59.061581+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437843"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, an open source, command line text editor. This heap buffer overflow vulnerability exists in the tag file resolution logic when processing the \u0027helpfile\u0027 option. A local user could exploit this by providing a specially crafted \u0027helpfile\u0027 option value, leading to a heap buffer overflow. This could result in arbitrary code execution or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary code execution via \u0027helpfile\u0027 option processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This MODERATE impact vulnerability in Vim\u0027s tag file resolution logic allows a local attacker to achieve a out-of-bounds write. By providing a specially crafted `helpfile` option value a local user can trigger a heap buffer overflow, as consequence lead to memory corruption presenting a data integrity impact or leading the vim process to crash resulting in availability impact. Although being non-trivial and very complex, arbitrary code execution is not discarded as worst case scenario.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25749"
},
{
"category": "external",
"summary": "RHBZ#2437843",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437843"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25749",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25749"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25749",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25749"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/0714b15940b245108e6e9d7aa2260dd849a26fa9",
"url": "https://github.com/vim/vim/commit/0714b15940b245108e6e9d7aa2260dd849a26fa9"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.1.2132",
"url": "https://github.com/vim/vim/releases/tag/v9.1.2132"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-5w93-4g67-mm43",
"url": "https://github.com/vim/vim/security/advisories/GHSA-5w93-4g67-mm43"
}
],
"release_date": "2026-02-06T22:43:38.630000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T17:32:43+00:00",
"details": "The Insights proxy container image provided here is downloaded by the Red Hat\nInsights proxy product RPM.\n\nBefore applying this update, make sure all previously released errata relevant to\nyour system have been applied.",
"product_ids": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9832"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Arbitrary code execution via \u0027helpfile\u0027 option processing"
},
{
"cve": "CVE-2026-27135",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-03-18T19:02:13.823002+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448754"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27135"
},
{
"category": "external",
"summary": "RHBZ#2448754",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448754"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27135",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27135"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27135",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27135"
},
{
"category": "external",
"summary": "https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1",
"url": "https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1"
},
{
"category": "external",
"summary": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6",
"url": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6"
}
],
"release_date": "2026-03-18T17:59:02.045000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T17:32:43+00:00",
"details": "The Insights proxy container image provided here is downloaded by the Red Hat\nInsights proxy product RPM.\n\nBefore applying this update, make sure all previously released errata relevant to\nyour system have been applied.",
"product_ids": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9832"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination"
},
{
"cve": "CVE-2026-28417",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-02-27T22:01:53.728412+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2443455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, an open-source command-line text editor. Specifically, an operating system (OS) command injection vulnerability exists in the `netrw` standard plugin. A remote attacker could exploit this by tricking a user into opening a specially crafted URL, such as one using the `scp://` protocol handler. Successful exploitation allows the attacker to execute arbitrary shell commands with the same privileges as the Vim process, leading to potential system compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The risk posed by this vulnerability is limited on Red Hat products due to user and system isolation features which are enabled by default. The impacts of this flaw will be limited by the active user\u0027s permissions and access control limits. Host systems are not at risk when following Red Hat guidelines and the root user account is not actively executing Vim.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28417"
},
{
"category": "external",
"summary": "RHBZ#2443455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2443455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28417",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28417"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28417",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28417"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/79348dbbc09332130f4c860",
"url": "https://github.com/vim/vim/commit/79348dbbc09332130f4c860"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0073",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0073"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-m3xh-9434-g336",
"url": "https://github.com/vim/vim/security/advisories/GHSA-m3xh-9434-g336"
}
],
"release_date": "2026-02-27T21:54:35.196000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T17:32:43+00:00",
"details": "The Insights proxy container image provided here is downloaded by the Red Hat\nInsights proxy product RPM.\n\nBefore applying this update, make sure all previously released errata relevant to\nyour system have been applied.",
"product_ids": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9832"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin"
},
{
"cve": "CVE-2026-28421",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-02-27T23:01:44.673504+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2443474"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim. This vulnerability, a heap-buffer-overflow and a segmentation fault, exists in the swap file recovery logic. A local attacker could exploit this by providing a specially crafted swap file. This could lead to a denial of service (DoS) or potentially information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Denial of service and information disclosure via crafted swap file",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The risk posed by this vulnerability is limited on Red Hat products due to user and system isolation features which are enabled by default. The impacts of this flaw will be limited by the active user\u0027s permissions and access control limits. Host systems are not at risk when following Red Hat guidelines and the root user account is not actively executing Vim.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28421"
},
{
"category": "external",
"summary": "RHBZ#2443474",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2443474"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28421",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28421"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28421",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28421"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/65c1a143c331c886dc28",
"url": "https://github.com/vim/vim/commit/65c1a143c331c886dc28"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0077",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0077"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p",
"url": "https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p"
}
],
"release_date": "2026-02-27T22:06:34.312000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T17:32:43+00:00",
"details": "The Insights proxy container image provided here is downloaded by the Red Hat\nInsights proxy product RPM.\n\nBefore applying this update, make sure all previously released errata relevant to\nyour system have been applied.",
"product_ids": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9832"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Denial of service and information disclosure via crafted swap file"
},
{
"cve": "CVE-2026-33412",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-03-24T20:02:21.511965+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450907"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim. By including a newline character in a pattern passed to Vim\u0027s glob() function, an attacker may be able to execute arbitrary shell commands. This command injection vulnerability allows for arbitrary code execution, depending on the user\u0027s shell settings.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary code execution via command injection in glob() function",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33412"
},
{
"category": "external",
"summary": "RHBZ#2450907",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450907"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33412",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33412"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33412",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33412"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/645ed6597d1ea896c712cd7ddbb6edee79577e9a",
"url": "https://github.com/vim/vim/commit/645ed6597d1ea896c712cd7ddbb6edee79577e9a"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0202",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0202"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-w5jw-f54h-x46c",
"url": "https://github.com/vim/vim/security/advisories/GHSA-w5jw-f54h-x46c"
}
],
"release_date": "2026-03-24T19:43:07.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T17:32:43+00:00",
"details": "The Insights proxy container image provided here is downloaded by the Red Hat\nInsights proxy product RPM.\n\nBefore applying this update, make sure all previously released errata relevant to\nyour system have been applied.",
"product_ids": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9832"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42_amd64",
"Red Hat Insights proxy 1.5:registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:c2f5c9ccaaa7a8d1aef0ecb97a534a904510613ed2fb7c1e6b60400ae236f2d6_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary code execution via command injection in glob() function"
}
]
}
SSA-585531
Vulnerability from csaf_siemens - Published: 2026-07-14 00:00 - Updated: 2026-07-14 00:00Summary
SSA-585531: Multiple Vulnerabilities in SIDIS Secured SmartPlug before V7.26.0310
Notes
Summary: SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below.
Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version.
General Recommendations: As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use: The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.
The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.
9.8 (Critical)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SIDIS Secured SmartPlug < V7.26.0310
Siemens / SIDIS Secured SmartPlug
|
vers:intdot/<7.26.0310 |
Vendor Fix
|
The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9495.
7.0 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SIDIS Secured SmartPlug < V7.26.0310
Siemens / SIDIS Secured SmartPlug
|
vers:intdot/<7.26.0310 |
Vendor Fix
|
In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.
6.5 (Medium)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SIDIS Secured SmartPlug < V7.26.0310
Siemens / SIDIS Secured SmartPlug
|
vers:intdot/<7.26.0310 |
Vendor Fix
|
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
7.8 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SIDIS Secured SmartPlug < V7.26.0310
Siemens / SIDIS Secured SmartPlug
|
vers:intdot/<7.26.0310 |
Vendor Fix
|
A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.
7.0 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SIDIS Secured SmartPlug < V7.26.0310
Siemens / SIDIS Secured SmartPlug
|
vers:intdot/<7.26.0310 |
Vendor Fix
|
A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.
7.8 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SIDIS Secured SmartPlug < V7.26.0310
Siemens / SIDIS Secured SmartPlug
|
vers:intdot/<7.26.0310 |
Vendor Fix
|
Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SIDIS Secured SmartPlug < V7.26.0310
Siemens / SIDIS Secured SmartPlug
|
vers:intdot/<7.26.0310 |
Vendor Fix
|
Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private key by an attacker.. While remote key recovery over a network was not attempted by the reporter, timing measurements revealed a timing signal which may allow such an attack. OpenSSL does not directly support certificates with SM2 keys in TLS, and so this CVE is not relevant in most TLS contexts. However, given that it is possible to add support for such certificates via a custom provider, coupled with the fact that in such a custom provider context the private key may be recoverable via remote timing measurements, we consider this to be a Moderate severity issue. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as SM2 is not an approved algorithm.
6.5 (Medium)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SIDIS Secured SmartPlug < V7.26.0310
Siemens / SIDIS Secured SmartPlug
|
vers:intdot/<7.26.0310 |
Vendor Fix
|
Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash which leads to Denial of Service for an application. The OpenSSL HTTP client API functions can be used directly by applications but they are also used by the OCSP client functions and CMP (Certificate Management Protocol) client implementation in OpenSSL. However the URLs used by these implementations are unlikely to be controlled by an attacker. In this vulnerable code the out of bounds read can only trigger a crash. Furthermore the vulnerability requires an attacker-controlled URL to be passed from an application to the OpenSSL function and the user has to have a 'no_proxy' environment variable set. For the aforementioned reasons the issue was assessed as Low severity. The vulnerable code was introduced in the following patch releases: 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the HTTP client implementation is outside the OpenSSL FIPS module boundary.
5.9 (Medium)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SIDIS Secured SmartPlug < V7.26.0310
Siemens / SIDIS Secured SmartPlug
|
vers:intdot/<7.26.0310 |
Vendor Fix
|
A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high.
6.8 (Medium)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SIDIS Secured SmartPlug < V7.26.0310
Siemens / SIDIS Secured SmartPlug
|
vers:intdot/<7.26.0310 |
Vendor Fix
|
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.
CWE-863 - Incorrect AuthorizationAffected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SIDIS Secured SmartPlug < V7.26.0310
Siemens / SIDIS Secured SmartPlug
|
vers:intdot/<7.26.0310 |
Vendor Fix
|
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SIDIS Secured SmartPlug < V7.26.0310
Siemens / SIDIS Secured SmartPlug
|
vers:intdot/<7.26.0310 |
Vendor Fix
|
References
2 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
"tlp": {
"label": "WHITE"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below.\n\nSiemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version.",
"title": "Summary"
},
{
"category": "general",
"text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "productcert@siemens.com",
"name": "Siemens ProductCERT",
"namespace": "https://www.siemens.com"
},
"references": [
{
"category": "self",
"summary": "SSA-585531: Multiple Vulnerabilities in SIDIS Secured SmartPlug before V7.26.0310 - HTML Version",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-585531.html"
},
{
"category": "self",
"summary": "SSA-585531: Multiple Vulnerabilities in SIDIS Secured SmartPlug before V7.26.0310 - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-585531.json"
}
],
"title": "SSA-585531: Multiple Vulnerabilities in SIDIS Secured SmartPlug before V7.26.0310",
"tracking": {
"current_release_date": "2026-07-14T00:00:00.000Z",
"generator": {
"engine": {
"name": "Siemens ProductCERT CSAF Generator",
"version": "1"
}
},
"id": "SSA-585531",
"initial_release_date": "2026-07-14T00:00:00.000Z",
"revision_history": [
{
"date": "2026-07-14T00:00:00.000Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
}
],
"status": "interim",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c7.26.0310",
"product": {
"name": "SIDIS Secured SmartPlug \u003c V7.26.0310",
"product_id": "1"
}
}
],
"category": "product_name",
"name": "SIDIS Secured SmartPlug"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-23303",
"cwe": {
"id": "CWE-924",
"name": "Improper Enforcement of Message Integrity During Transmission in a Communication Channel"
},
"notes": [
{
"category": "description",
"text": "The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.26.0310 or later version",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-23303"
},
{
"cve": "CVE-2022-23304",
"cwe": {
"id": "CWE-924",
"name": "Improper Enforcement of Message Integrity During Transmission in a Communication Channel"
},
"notes": [
{
"category": "description",
"text": "The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9495.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.26.0310 or later version",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-23304"
},
{
"cve": "CVE-2022-37660",
"cwe": {
"id": "CWE-323",
"name": "Reusing a Nonce, Key Pair in Encryption"
},
"notes": [
{
"category": "description",
"text": "In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.26.0310 or later version",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-37660"
},
{
"cve": "CVE-2022-48174",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "description",
"text": "There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.26.0310 or later version",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-48174"
},
{
"cve": "CVE-2025-5222",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "description",
"text": "A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the \u0027subtag\u0027 struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.26.0310 or later version",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2025-5222"
},
{
"cve": "CVE-2025-5914",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "description",
"text": "A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.26.0310 or later version",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2025-5914"
},
{
"cve": "CVE-2025-9230",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "description",
"text": "Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.26.0310 or later version",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2025-9230"
},
{
"cve": "CVE-2025-9231",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"notes": [
{
"category": "description",
"text": "Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts. However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.26.0310 or later version",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2025-9231"
},
{
"cve": "CVE-2025-9232",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "description",
"text": "Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the \u0027no_proxy\u0027 environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na \u0027no_proxy\u0027 environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.26.0310 or later version",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2025-9232"
},
{
"cve": "CVE-2025-26465",
"cwe": {
"id": "CWE-390",
"name": "Detection of Error Condition Without Action"
},
"notes": [
{
"category": "description",
"text": "A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client\u0027s memory resource first, turning the attack complexity high.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.26.0310 or later version",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2025-26465"
},
{
"cve": "CVE-2025-32462",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "description",
"text": "Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.26.0310 or later version",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2025-32462"
},
{
"cve": "CVE-2026-5121",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "description",
"text": "A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V7.26.0310 or later version",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2026-5121"
}
]
}
SUSE-SU-2026:21757-1
Vulnerability from csaf_suse - Published: 2026-05-25 07:42 - Updated: 2026-05-25 07:42Summary
Security update for libarchive
Severity
Important
Notes
Title of the patch: Security update for libarchive
Description of the patch: This update for libarchive fixes the following issues
- CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop
and DoS (bsc#1259635).
- CVE-2026-4424: 257-byte heap memory leak when processing a 170-byte RAR3 (bsc#1259928).
- CVE-2026-4426: undefined behavior due to unvalidated operand in shift expression of the zisofs decompression code
(bsc#1259931).
- CVE-2026-5121: missing validation check for pz_log2_bs can a heap buffer overflow write (bsc#1261186).
Patchnames: SUSE-SL-Micro-6.2-799
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.6 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.1 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libarchive",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libarchive fixes the following issues\n\n- CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop\n and DoS (bsc#1259635).\n- CVE-2026-4424: 257-byte heap memory leak when processing a 170-byte RAR3 (bsc#1259928).\n- CVE-2026-4426: undefined behavior due to unvalidated operand in shift expression of the zisofs decompression code\n (bsc#1259931).\n- CVE-2026-5121: missing validation check for pz_log2_bs can a heap buffer overflow write (bsc#1261186).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SL-Micro-6.2-799",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21757-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:21757-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202621757-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:21757-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-May/046759.html"
},
{
"category": "self",
"summary": "SUSE Bug 1259635",
"url": "https://bugzilla.suse.com/1259635"
},
{
"category": "self",
"summary": "SUSE Bug 1259928",
"url": "https://bugzilla.suse.com/1259928"
},
{
"category": "self",
"summary": "SUSE Bug 1259931",
"url": "https://bugzilla.suse.com/1259931"
},
{
"category": "self",
"summary": "SUSE Bug 1261186",
"url": "https://bugzilla.suse.com/1261186"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4111 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4424 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4424/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4426 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4426/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5121 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5121/"
}
],
"title": "Security update for libarchive",
"tracking": {
"current_release_date": "2026-05-25T07:42:39Z",
"generator": {
"date": "2026-05-25T07:42:39Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:21757-1",
"initial_release_date": "2026-05-25T07:42:39Z",
"revision_history": [
{
"date": "2026-05-25T07:42:39Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libarchive13-3.8.1-160000.3.1.aarch64",
"product": {
"name": "libarchive13-3.8.1-160000.3.1.aarch64",
"product_id": "libarchive13-3.8.1-160000.3.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libarchive13-3.8.1-160000.3.1.ppc64le",
"product": {
"name": "libarchive13-3.8.1-160000.3.1.ppc64le",
"product_id": "libarchive13-3.8.1-160000.3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libarchive13-3.8.1-160000.3.1.s390x",
"product": {
"name": "libarchive13-3.8.1-160000.3.1.s390x",
"product_id": "libarchive13-3.8.1-160000.3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libarchive13-3.8.1-160000.3.1.x86_64",
"product": {
"name": "libarchive13-3.8.1-160000.3.1.x86_64",
"product_id": "libarchive13-3.8.1-160000.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.2",
"product": {
"name": "SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.8.1-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.aarch64"
},
"product_reference": "libarchive13-3.8.1-160000.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.8.1-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.ppc64le"
},
"product_reference": "libarchive13-3.8.1-160000.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.8.1-160000.3.1.s390x as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.s390x"
},
"product_reference": "libarchive13-3.8.1-160000.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.8.1-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.x86_64"
},
"product_reference": "libarchive13-3.8.1-160000.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-4111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4111"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4111",
"url": "https://www.suse.com/security/cve/CVE-2026-4111"
},
{
"category": "external",
"summary": "SUSE Bug 1259634 for CVE-2026-4111",
"url": "https://bugzilla.suse.com/1259634"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-25T07:42:39Z",
"details": "important"
}
],
"title": "CVE-2026-4111"
},
{
"cve": "CVE-2026-4424",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4424"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4424",
"url": "https://www.suse.com/security/cve/CVE-2026-4424"
},
{
"category": "external",
"summary": "SUSE Bug 1259927 for CVE-2026-4424",
"url": "https://bugzilla.suse.com/1259927"
},
{
"category": "external",
"summary": "SUSE Bug 1265940 for CVE-2026-4424",
"url": "https://bugzilla.suse.com/1265940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-25T07:42:39Z",
"details": "important"
}
],
"title": "CVE-2026-4424"
},
{
"cve": "CVE-2026-4426",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4426"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to incorrect memory allocation and potential application crashes, resulting in a denial-of-service (DoS) condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4426",
"url": "https://www.suse.com/security/cve/CVE-2026-4426"
},
{
"category": "external",
"summary": "SUSE Bug 1259930 for CVE-2026-4426",
"url": "https://bugzilla.suse.com/1259930"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-25T07:42:39Z",
"details": "important"
}
],
"title": "CVE-2026-4426"
},
{
"cve": "CVE-2026-5121",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5121"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5121",
"url": "https://www.suse.com/security/cve/CVE-2026-5121"
},
{
"category": "external",
"summary": "SUSE Bug 1261184 for CVE-2026-5121",
"url": "https://bugzilla.suse.com/1261184"
},
{
"category": "external",
"summary": "SUSE Bug 1265940 for CVE-2026-5121",
"url": "https://bugzilla.suse.com/1265940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Micro 6.2:libarchive13-3.8.1-160000.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-25T07:42:39Z",
"details": "important"
}
],
"title": "CVE-2026-5121"
}
]
}
SUSE-SU-2026:21831-1
Vulnerability from csaf_suse - Published: 2026-05-25 07:42 - Updated: 2026-05-25 07:42Summary
Security update for libarchive
Severity
Important
Notes
Title of the patch: Security update for libarchive
Description of the patch: This update for libarchive fixes the following issues
- CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop
and DoS (bsc#1259635).
- CVE-2026-4424: 257-byte heap memory leak when processing a 170-byte RAR3 (bsc#1259928).
- CVE-2026-4426: undefined behavior due to unvalidated operand in shift expression of the zisofs decompression code
(bsc#1259931).
- CVE-2026-5121: missing validation check for pz_log2_bs can a heap buffer overflow write (bsc#1261186).
Patchnames: SUSE-SLES-16.0-799
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.6 (High)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.1 (High)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libarchive",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libarchive fixes the following issues\n\n- CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop\n and DoS (bsc#1259635).\n- CVE-2026-4424: 257-byte heap memory leak when processing a 170-byte RAR3 (bsc#1259928).\n- CVE-2026-4426: undefined behavior due to unvalidated operand in shift expression of the zisofs decompression code\n (bsc#1259931).\n- CVE-2026-5121: missing validation check for pz_log2_bs can a heap buffer overflow write (bsc#1261186).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLES-16.0-799",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21831-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:21831-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202621831-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:21831-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-May/046782.html"
},
{
"category": "self",
"summary": "SUSE Bug 1259635",
"url": "https://bugzilla.suse.com/1259635"
},
{
"category": "self",
"summary": "SUSE Bug 1259928",
"url": "https://bugzilla.suse.com/1259928"
},
{
"category": "self",
"summary": "SUSE Bug 1259931",
"url": "https://bugzilla.suse.com/1259931"
},
{
"category": "self",
"summary": "SUSE Bug 1261186",
"url": "https://bugzilla.suse.com/1261186"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4111 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4424 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4424/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4426 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4426/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5121 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5121/"
}
],
"title": "Security update for libarchive",
"tracking": {
"current_release_date": "2026-05-25T07:42:39Z",
"generator": {
"date": "2026-05-25T07:42:39Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:21831-1",
"initial_release_date": "2026-05-25T07:42:39Z",
"revision_history": [
{
"date": "2026-05-25T07:42:39Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.8.1-160000.3.1.aarch64",
"product": {
"name": "bsdtar-3.8.1-160000.3.1.aarch64",
"product_id": "bsdtar-3.8.1-160000.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.8.1-160000.3.1.aarch64",
"product": {
"name": "libarchive-devel-3.8.1-160000.3.1.aarch64",
"product_id": "libarchive-devel-3.8.1-160000.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "libarchive13-3.8.1-160000.3.1.aarch64",
"product": {
"name": "libarchive13-3.8.1-160000.3.1.aarch64",
"product_id": "libarchive13-3.8.1-160000.3.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.8.1-160000.3.1.ppc64le",
"product": {
"name": "bsdtar-3.8.1-160000.3.1.ppc64le",
"product_id": "bsdtar-3.8.1-160000.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.8.1-160000.3.1.ppc64le",
"product": {
"name": "libarchive-devel-3.8.1-160000.3.1.ppc64le",
"product_id": "libarchive-devel-3.8.1-160000.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libarchive13-3.8.1-160000.3.1.ppc64le",
"product": {
"name": "libarchive13-3.8.1-160000.3.1.ppc64le",
"product_id": "libarchive13-3.8.1-160000.3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.8.1-160000.3.1.s390x",
"product": {
"name": "bsdtar-3.8.1-160000.3.1.s390x",
"product_id": "bsdtar-3.8.1-160000.3.1.s390x"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.8.1-160000.3.1.s390x",
"product": {
"name": "libarchive-devel-3.8.1-160000.3.1.s390x",
"product_id": "libarchive-devel-3.8.1-160000.3.1.s390x"
}
},
{
"category": "product_version",
"name": "libarchive13-3.8.1-160000.3.1.s390x",
"product": {
"name": "libarchive13-3.8.1-160000.3.1.s390x",
"product_id": "libarchive13-3.8.1-160000.3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.8.1-160000.3.1.x86_64",
"product": {
"name": "bsdtar-3.8.1-160000.3.1.x86_64",
"product_id": "bsdtar-3.8.1-160000.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.8.1-160000.3.1.x86_64",
"product": {
"name": "libarchive-devel-3.8.1-160000.3.1.x86_64",
"product_id": "libarchive-devel-3.8.1-160000.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libarchive13-3.8.1-160000.3.1.x86_64",
"product": {
"name": "libarchive13-3.8.1-160000.3.1.x86_64",
"product_id": "libarchive13-3.8.1-160000.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 16.0",
"product": {
"name": "SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product": {
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server-sap"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.8.1-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.aarch64"
},
"product_reference": "bsdtar-3.8.1-160000.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.8.1-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.ppc64le"
},
"product_reference": "bsdtar-3.8.1-160000.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.8.1-160000.3.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.s390x"
},
"product_reference": "bsdtar-3.8.1-160000.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.8.1-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.x86_64"
},
"product_reference": "bsdtar-3.8.1-160000.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.8.1-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64"
},
"product_reference": "libarchive-devel-3.8.1-160000.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.8.1-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le"
},
"product_reference": "libarchive-devel-3.8.1-160000.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.8.1-160000.3.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.s390x"
},
"product_reference": "libarchive-devel-3.8.1-160000.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.8.1-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64"
},
"product_reference": "libarchive-devel-3.8.1-160000.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.8.1-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.aarch64"
},
"product_reference": "libarchive13-3.8.1-160000.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.8.1-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.ppc64le"
},
"product_reference": "libarchive13-3.8.1-160000.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.8.1-160000.3.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.s390x"
},
"product_reference": "libarchive13-3.8.1-160000.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.8.1-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.x86_64"
},
"product_reference": "libarchive13-3.8.1-160000.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.8.1-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.aarch64"
},
"product_reference": "bsdtar-3.8.1-160000.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.8.1-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.ppc64le"
},
"product_reference": "bsdtar-3.8.1-160000.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.8.1-160000.3.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.s390x"
},
"product_reference": "bsdtar-3.8.1-160000.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.8.1-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.x86_64"
},
"product_reference": "bsdtar-3.8.1-160000.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.8.1-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64"
},
"product_reference": "libarchive-devel-3.8.1-160000.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.8.1-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le"
},
"product_reference": "libarchive-devel-3.8.1-160000.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.8.1-160000.3.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.s390x"
},
"product_reference": "libarchive-devel-3.8.1-160000.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.8.1-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64"
},
"product_reference": "libarchive-devel-3.8.1-160000.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.8.1-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.aarch64"
},
"product_reference": "libarchive13-3.8.1-160000.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.8.1-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.ppc64le"
},
"product_reference": "libarchive13-3.8.1-160000.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.8.1-160000.3.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.s390x"
},
"product_reference": "libarchive13-3.8.1-160000.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.8.1-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.x86_64"
},
"product_reference": "libarchive13-3.8.1-160000.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-4111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4111"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4111",
"url": "https://www.suse.com/security/cve/CVE-2026-4111"
},
{
"category": "external",
"summary": "SUSE Bug 1259634 for CVE-2026-4111",
"url": "https://bugzilla.suse.com/1259634"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-25T07:42:39Z",
"details": "important"
}
],
"title": "CVE-2026-4111"
},
{
"cve": "CVE-2026-4424",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4424"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4424",
"url": "https://www.suse.com/security/cve/CVE-2026-4424"
},
{
"category": "external",
"summary": "SUSE Bug 1259927 for CVE-2026-4424",
"url": "https://bugzilla.suse.com/1259927"
},
{
"category": "external",
"summary": "SUSE Bug 1265940 for CVE-2026-4424",
"url": "https://bugzilla.suse.com/1265940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-25T07:42:39Z",
"details": "important"
}
],
"title": "CVE-2026-4424"
},
{
"cve": "CVE-2026-4426",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4426"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to incorrect memory allocation and potential application crashes, resulting in a denial-of-service (DoS) condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4426",
"url": "https://www.suse.com/security/cve/CVE-2026-4426"
},
{
"category": "external",
"summary": "SUSE Bug 1259930 for CVE-2026-4426",
"url": "https://bugzilla.suse.com/1259930"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-25T07:42:39Z",
"details": "important"
}
],
"title": "CVE-2026-4426"
},
{
"cve": "CVE-2026-5121",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5121"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5121",
"url": "https://www.suse.com/security/cve/CVE-2026-5121"
},
{
"category": "external",
"summary": "SUSE Bug 1261184 for CVE-2026-5121",
"url": "https://bugzilla.suse.com/1261184"
},
{
"category": "external",
"summary": "SUSE Bug 1265940 for CVE-2026-5121",
"url": "https://bugzilla.suse.com/1265940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libarchive13-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:bsdtar-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive-devel-3.8.1-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libarchive13-3.8.1-160000.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-25T07:42:39Z",
"details": "important"
}
],
"title": "CVE-2026-5121"
}
]
}
SUSE-SU-2026:22241-1
Vulnerability from csaf_suse - Published: 2026-06-18 08:00 - Updated: 2026-06-18 08:00Summary
Security update for libarchive
Severity
Important
Notes
Title of the patch: Security update for libarchive
Description of the patch: This update for libarchive fixes the following issues
- CVE-2025-60753: bsdtar hangs and OOMs with zero-length pattern matches (bsc#1253088).
- CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop
and DoS (bsc#1259635).
- CVE-2026-4424: information disclosure via heap out-of-bounds read in RAR archive processing (bsc#1259928).
- CVE-2026-4426: undefined behavior due to unvalidated operand in shift expression of the zisofs decompression code
(bsc#1259931).
- CVE-2026-5121: arbitrary code execution via integer overflow in ISO9660 image processing (bsc#1261186).
Patchnames: SUSE-SLE-Micro-6.0-762
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.6 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.1 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
26 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libarchive",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libarchive fixes the following issues\n\n- CVE-2025-60753: bsdtar hangs and OOMs with zero-length pattern matches (bsc#1253088).\n- CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop\n and DoS (bsc#1259635).\n- CVE-2026-4424: information disclosure via heap out-of-bounds read in RAR archive processing (bsc#1259928).\n- CVE-2026-4426: undefined behavior due to unvalidated operand in shift expression of the zisofs decompression code\n (bsc#1259931).\n- CVE-2026-5121: arbitrary code execution via integer overflow in ISO9660 image processing (bsc#1261186).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.0-762",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22241-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:22241-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622241-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:22241-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047623.html"
},
{
"category": "self",
"summary": "SUSE Bug 1253088",
"url": "https://bugzilla.suse.com/1253088"
},
{
"category": "self",
"summary": "SUSE Bug 1259635",
"url": "https://bugzilla.suse.com/1259635"
},
{
"category": "self",
"summary": "SUSE Bug 1259928",
"url": "https://bugzilla.suse.com/1259928"
},
{
"category": "self",
"summary": "SUSE Bug 1259931",
"url": "https://bugzilla.suse.com/1259931"
},
{
"category": "self",
"summary": "SUSE Bug 1261186",
"url": "https://bugzilla.suse.com/1261186"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-60753 page",
"url": "https://www.suse.com/security/cve/CVE-2025-60753/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4111 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4424 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4424/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4426 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4426/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5121 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5121/"
}
],
"title": "Security update for libarchive",
"tracking": {
"current_release_date": "2026-06-18T08:00:49Z",
"generator": {
"date": "2026-06-18T08:00:49Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:22241-1",
"initial_release_date": "2026-06-18T08:00:49Z",
"revision_history": [
{
"date": "2026-06-18T08:00:49Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libarchive13-3.6.2-6.1.aarch64",
"product": {
"name": "libarchive13-3.6.2-6.1.aarch64",
"product_id": "libarchive13-3.6.2-6.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libarchive13-3.6.2-6.1.s390x",
"product": {
"name": "libarchive13-3.6.2-6.1.s390x",
"product_id": "libarchive13-3.6.2-6.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libarchive13-3.6.2-6.1.x86_64",
"product": {
"name": "libarchive13-3.6.2-6.1.x86_64",
"product_id": "libarchive13-3.6.2-6.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.0",
"product": {
"name": "SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.6.2-6.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64"
},
"product_reference": "libarchive13-3.6.2-6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.6.2-6.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x"
},
"product_reference": "libarchive13-3.6.2-6.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.6.2-6.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64"
},
"product_reference": "libarchive13-3.6.2-6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-60753",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-60753"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service (Out-of-Memory crash).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-60753",
"url": "https://www.suse.com/security/cve/CVE-2025-60753"
},
{
"category": "external",
"summary": "SUSE Bug 1253088 for CVE-2025-60753",
"url": "https://bugzilla.suse.com/1253088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-18T08:00:49Z",
"details": "moderate"
}
],
"title": "CVE-2025-60753"
},
{
"cve": "CVE-2026-4111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4111"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4111",
"url": "https://www.suse.com/security/cve/CVE-2026-4111"
},
{
"category": "external",
"summary": "SUSE Bug 1259634 for CVE-2026-4111",
"url": "https://bugzilla.suse.com/1259634"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-18T08:00:49Z",
"details": "important"
}
],
"title": "CVE-2026-4111"
},
{
"cve": "CVE-2026-4424",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4424"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4424",
"url": "https://www.suse.com/security/cve/CVE-2026-4424"
},
{
"category": "external",
"summary": "SUSE Bug 1259927 for CVE-2026-4424",
"url": "https://bugzilla.suse.com/1259927"
},
{
"category": "external",
"summary": "SUSE Bug 1265940 for CVE-2026-4424",
"url": "https://bugzilla.suse.com/1265940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-18T08:00:49Z",
"details": "important"
}
],
"title": "CVE-2026-4424"
},
{
"cve": "CVE-2026-4426",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4426"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to incorrect memory allocation and potential application crashes, resulting in a denial-of-service (DoS) condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4426",
"url": "https://www.suse.com/security/cve/CVE-2026-4426"
},
{
"category": "external",
"summary": "SUSE Bug 1259930 for CVE-2026-4426",
"url": "https://bugzilla.suse.com/1259930"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-18T08:00:49Z",
"details": "important"
}
],
"title": "CVE-2026-4426"
},
{
"cve": "CVE-2026-5121",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5121"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5121",
"url": "https://www.suse.com/security/cve/CVE-2026-5121"
},
{
"category": "external",
"summary": "SUSE Bug 1261184 for CVE-2026-5121",
"url": "https://bugzilla.suse.com/1261184"
},
{
"category": "external",
"summary": "SUSE Bug 1265940 for CVE-2026-5121",
"url": "https://bugzilla.suse.com/1265940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.aarch64",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.s390x",
"SUSE Linux Micro 6.0:libarchive13-3.6.2-6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-18T08:00:49Z",
"details": "important"
}
],
"title": "CVE-2026-5121"
}
]
}
SUSE-SU-2026:22248-1
Vulnerability from csaf_suse - Published: 2026-06-22 09:04 - Updated: 2026-06-22 09:04Summary
Security update for libarchive
Severity
Important
Notes
Title of the patch: Security update for libarchive
Description of the patch: This update for libarchive fixes the following issues
- CVE-2025-60753: bsdtar hangs and OOMs with zero-length pattern matches (bsc#1253088).
- CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop
and DoS (bsc#1259635).
- CVE-2026-4424: information disclosure via heap out-of-bounds read in RAR archive processing (bsc#1259928).
- CVE-2026-4426: undefined behavior due to unvalidated operand in shift expression of the zisofs decompression code
(bsc#1259931).
- CVE-2026-5121: arbitrary code execution via integer overflow in ISO9660 image processing (bsc#1261186).
Patchnames: SUSE-SLE-Micro-6.1-586
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.6 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.1 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
26 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libarchive",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libarchive fixes the following issues\n\n- CVE-2025-60753: bsdtar hangs and OOMs with zero-length pattern matches (bsc#1253088).\n- CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop\n and DoS (bsc#1259635).\n- CVE-2026-4424: information disclosure via heap out-of-bounds read in RAR archive processing (bsc#1259928).\n- CVE-2026-4426: undefined behavior due to unvalidated operand in shift expression of the zisofs decompression code\n (bsc#1259931).\n- CVE-2026-5121: arbitrary code execution via integer overflow in ISO9660 image processing (bsc#1261186).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.1-586",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22248-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:22248-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622248-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:22248-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047616.html"
},
{
"category": "self",
"summary": "SUSE Bug 1253088",
"url": "https://bugzilla.suse.com/1253088"
},
{
"category": "self",
"summary": "SUSE Bug 1259635",
"url": "https://bugzilla.suse.com/1259635"
},
{
"category": "self",
"summary": "SUSE Bug 1259928",
"url": "https://bugzilla.suse.com/1259928"
},
{
"category": "self",
"summary": "SUSE Bug 1259931",
"url": "https://bugzilla.suse.com/1259931"
},
{
"category": "self",
"summary": "SUSE Bug 1261186",
"url": "https://bugzilla.suse.com/1261186"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-60753 page",
"url": "https://www.suse.com/security/cve/CVE-2025-60753/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4111 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4424 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4424/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4426 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4426/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5121 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5121/"
}
],
"title": "Security update for libarchive",
"tracking": {
"current_release_date": "2026-06-22T09:04:46Z",
"generator": {
"date": "2026-06-22T09:04:46Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:22248-1",
"initial_release_date": "2026-06-22T09:04:46Z",
"revision_history": [
{
"date": "2026-06-22T09:04:46Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libarchive13-3.7.4-slfo.1.1_4.1.aarch64",
"product": {
"name": "libarchive13-3.7.4-slfo.1.1_4.1.aarch64",
"product_id": "libarchive13-3.7.4-slfo.1.1_4.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libarchive13-3.7.4-slfo.1.1_4.1.ppc64le",
"product": {
"name": "libarchive13-3.7.4-slfo.1.1_4.1.ppc64le",
"product_id": "libarchive13-3.7.4-slfo.1.1_4.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libarchive13-3.7.4-slfo.1.1_4.1.s390x",
"product": {
"name": "libarchive13-3.7.4-slfo.1.1_4.1.s390x",
"product_id": "libarchive13-3.7.4-slfo.1.1_4.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libarchive13-3.7.4-slfo.1.1_4.1.x86_64",
"product": {
"name": "libarchive13-3.7.4-slfo.1.1_4.1.x86_64",
"product_id": "libarchive13-3.7.4-slfo.1.1_4.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.1",
"product": {
"name": "SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.7.4-slfo.1.1_4.1.aarch64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64"
},
"product_reference": "libarchive13-3.7.4-slfo.1.1_4.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.7.4-slfo.1.1_4.1.ppc64le as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le"
},
"product_reference": "libarchive13-3.7.4-slfo.1.1_4.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.7.4-slfo.1.1_4.1.s390x as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x"
},
"product_reference": "libarchive13-3.7.4-slfo.1.1_4.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.7.4-slfo.1.1_4.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64"
},
"product_reference": "libarchive13-3.7.4-slfo.1.1_4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-60753",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-60753"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service (Out-of-Memory crash).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-60753",
"url": "https://www.suse.com/security/cve/CVE-2025-60753"
},
{
"category": "external",
"summary": "SUSE Bug 1253088 for CVE-2025-60753",
"url": "https://bugzilla.suse.com/1253088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-22T09:04:46Z",
"details": "moderate"
}
],
"title": "CVE-2025-60753"
},
{
"cve": "CVE-2026-4111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4111"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4111",
"url": "https://www.suse.com/security/cve/CVE-2026-4111"
},
{
"category": "external",
"summary": "SUSE Bug 1259634 for CVE-2026-4111",
"url": "https://bugzilla.suse.com/1259634"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-22T09:04:46Z",
"details": "important"
}
],
"title": "CVE-2026-4111"
},
{
"cve": "CVE-2026-4424",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4424"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4424",
"url": "https://www.suse.com/security/cve/CVE-2026-4424"
},
{
"category": "external",
"summary": "SUSE Bug 1259927 for CVE-2026-4424",
"url": "https://bugzilla.suse.com/1259927"
},
{
"category": "external",
"summary": "SUSE Bug 1265940 for CVE-2026-4424",
"url": "https://bugzilla.suse.com/1265940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-22T09:04:46Z",
"details": "important"
}
],
"title": "CVE-2026-4424"
},
{
"cve": "CVE-2026-4426",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4426"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to incorrect memory allocation and potential application crashes, resulting in a denial-of-service (DoS) condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4426",
"url": "https://www.suse.com/security/cve/CVE-2026-4426"
},
{
"category": "external",
"summary": "SUSE Bug 1259930 for CVE-2026-4426",
"url": "https://bugzilla.suse.com/1259930"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-22T09:04:46Z",
"details": "important"
}
],
"title": "CVE-2026-4426"
},
{
"cve": "CVE-2026-5121",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5121"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5121",
"url": "https://www.suse.com/security/cve/CVE-2026-5121"
},
{
"category": "external",
"summary": "SUSE Bug 1261184 for CVE-2026-5121",
"url": "https://bugzilla.suse.com/1261184"
},
{
"category": "external",
"summary": "SUSE Bug 1265940 for CVE-2026-5121",
"url": "https://bugzilla.suse.com/1265940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.aarch64",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.ppc64le",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.s390x",
"SUSE Linux Micro 6.1:libarchive13-3.7.4-slfo.1.1_4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-22T09:04:46Z",
"details": "important"
}
],
"title": "CVE-2026-5121"
}
]
}
SUSE-SU-2026:2747-1
Vulnerability from csaf_suse - Published: 2026-07-03 11:46 - Updated: 2026-07-03 11:46Summary
Security update for libarchive
Severity
Important
Notes
Title of the patch: Security update for libarchive
Description of the patch: This update for libarchive fixes the following issues
- CVE-2025-60753: bsdtar hangs and OOMs with zero-length pattern matches (bsc#1253088).
- CVE-2026-4424: information disclosure via heap out-of-bounds read in RAR archive processing (bsc#1259928).
- CVE-2026-4426: undefined behavior due to unvalidated operand in shift expression of the zisofs decompression code
(bsc#1259931).
- CVE-2026-5121: arbitrary code execution via integer overflow in ISO9660 image processing (bsc#1261186).
Patchnames: SUSE-2026-2747,SUSE-SLE-SERVER-12-SP5-LTSS-2026-2747,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2747
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive13-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive13-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.6 (High)
Affected products
Recommended
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive13-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.1 (High)
Affected products
Recommended
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive13-3.3.3-32.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libarchive",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libarchive fixes the following issues\n\n- CVE-2025-60753: bsdtar hangs and OOMs with zero-length pattern matches (bsc#1253088).\n- CVE-2026-4424: information disclosure via heap out-of-bounds read in RAR archive processing (bsc#1259928).\n- CVE-2026-4426: undefined behavior due to unvalidated operand in shift expression of the zisofs decompression code\n (bsc#1259931).\n- CVE-2026-5121: arbitrary code execution via integer overflow in ISO9660 image processing (bsc#1261186).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-2747,SUSE-SLE-SERVER-12-SP5-LTSS-2026-2747,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2747",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2747-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:2747-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262747-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:2747-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027267.html"
},
{
"category": "self",
"summary": "SUSE Bug 1253088",
"url": "https://bugzilla.suse.com/1253088"
},
{
"category": "self",
"summary": "SUSE Bug 1259928",
"url": "https://bugzilla.suse.com/1259928"
},
{
"category": "self",
"summary": "SUSE Bug 1259931",
"url": "https://bugzilla.suse.com/1259931"
},
{
"category": "self",
"summary": "SUSE Bug 1261186",
"url": "https://bugzilla.suse.com/1261186"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-60753 page",
"url": "https://www.suse.com/security/cve/CVE-2025-60753/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4424 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4424/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4426 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4426/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5121 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5121/"
}
],
"title": "Security update for libarchive",
"tracking": {
"current_release_date": "2026-07-03T11:46:40Z",
"generator": {
"date": "2026-07-03T11:46:40Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:2747-1",
"initial_release_date": "2026-07-03T11:46:40Z",
"revision_history": [
{
"date": "2026-07-03T11:46:40Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.3.3-32.17.1.aarch64",
"product": {
"name": "bsdtar-3.3.3-32.17.1.aarch64",
"product_id": "bsdtar-3.3.3-32.17.1.aarch64"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.3.3-32.17.1.aarch64",
"product": {
"name": "libarchive-devel-3.3.3-32.17.1.aarch64",
"product_id": "libarchive-devel-3.3.3-32.17.1.aarch64"
}
},
{
"category": "product_version",
"name": "libarchive13-3.3.3-32.17.1.aarch64",
"product": {
"name": "libarchive13-3.3.3-32.17.1.aarch64",
"product_id": "libarchive13-3.3.3-32.17.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libarchive13-64bit-3.3.3-32.17.1.aarch64_ilp32",
"product": {
"name": "libarchive13-64bit-3.3.3-32.17.1.aarch64_ilp32",
"product_id": "libarchive13-64bit-3.3.3-32.17.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.3.3-32.17.1.i586",
"product": {
"name": "bsdtar-3.3.3-32.17.1.i586",
"product_id": "bsdtar-3.3.3-32.17.1.i586"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.3.3-32.17.1.i586",
"product": {
"name": "libarchive-devel-3.3.3-32.17.1.i586",
"product_id": "libarchive-devel-3.3.3-32.17.1.i586"
}
},
{
"category": "product_version",
"name": "libarchive13-3.3.3-32.17.1.i586",
"product": {
"name": "libarchive13-3.3.3-32.17.1.i586",
"product_id": "libarchive13-3.3.3-32.17.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.3.3-32.17.1.ppc64le",
"product": {
"name": "bsdtar-3.3.3-32.17.1.ppc64le",
"product_id": "bsdtar-3.3.3-32.17.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.3.3-32.17.1.ppc64le",
"product": {
"name": "libarchive-devel-3.3.3-32.17.1.ppc64le",
"product_id": "libarchive-devel-3.3.3-32.17.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libarchive13-3.3.3-32.17.1.ppc64le",
"product": {
"name": "libarchive13-3.3.3-32.17.1.ppc64le",
"product_id": "libarchive13-3.3.3-32.17.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.3.3-32.17.1.s390",
"product": {
"name": "bsdtar-3.3.3-32.17.1.s390",
"product_id": "bsdtar-3.3.3-32.17.1.s390"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.3.3-32.17.1.s390",
"product": {
"name": "libarchive-devel-3.3.3-32.17.1.s390",
"product_id": "libarchive-devel-3.3.3-32.17.1.s390"
}
},
{
"category": "product_version",
"name": "libarchive13-3.3.3-32.17.1.s390",
"product": {
"name": "libarchive13-3.3.3-32.17.1.s390",
"product_id": "libarchive13-3.3.3-32.17.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.3.3-32.17.1.s390x",
"product": {
"name": "bsdtar-3.3.3-32.17.1.s390x",
"product_id": "bsdtar-3.3.3-32.17.1.s390x"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.3.3-32.17.1.s390x",
"product": {
"name": "libarchive-devel-3.3.3-32.17.1.s390x",
"product_id": "libarchive-devel-3.3.3-32.17.1.s390x"
}
},
{
"category": "product_version",
"name": "libarchive13-3.3.3-32.17.1.s390x",
"product": {
"name": "libarchive13-3.3.3-32.17.1.s390x",
"product_id": "libarchive13-3.3.3-32.17.1.s390x"
}
},
{
"category": "product_version",
"name": "libarchive13-32bit-3.3.3-32.17.1.s390x",
"product": {
"name": "libarchive13-32bit-3.3.3-32.17.1.s390x",
"product_id": "libarchive13-32bit-3.3.3-32.17.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.3.3-32.17.1.x86_64",
"product": {
"name": "bsdtar-3.3.3-32.17.1.x86_64",
"product_id": "bsdtar-3.3.3-32.17.1.x86_64"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.3.3-32.17.1.x86_64",
"product": {
"name": "libarchive-devel-3.3.3-32.17.1.x86_64",
"product_id": "libarchive-devel-3.3.3-32.17.1.x86_64"
}
},
{
"category": "product_version",
"name": "libarchive13-3.3.3-32.17.1.x86_64",
"product": {
"name": "libarchive13-3.3.3-32.17.1.x86_64",
"product_id": "libarchive13-3.3.3-32.17.1.x86_64"
}
},
{
"category": "product_version",
"name": "libarchive13-32bit-3.3.3-32.17.1.x86_64",
"product": {
"name": "libarchive13-32bit-3.3.3-32.17.1.x86_64",
"product_id": "libarchive13-32bit-3.3.3-32.17.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.3-32.17.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.aarch64"
},
"product_reference": "libarchive-devel-3.3.3-32.17.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.3-32.17.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.ppc64le"
},
"product_reference": "libarchive-devel-3.3.3-32.17.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.3-32.17.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.s390x"
},
"product_reference": "libarchive-devel-3.3.3-32.17.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.3-32.17.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.x86_64"
},
"product_reference": "libarchive-devel-3.3.3-32.17.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.3-32.17.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.aarch64"
},
"product_reference": "libarchive13-3.3.3-32.17.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.3-32.17.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.ppc64le"
},
"product_reference": "libarchive13-3.3.3-32.17.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.3-32.17.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.s390x"
},
"product_reference": "libarchive13-3.3.3-32.17.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.3-32.17.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.x86_64"
},
"product_reference": "libarchive13-3.3.3-32.17.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.3-32.17.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.aarch64"
},
"product_reference": "libarchive-devel-3.3.3-32.17.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.3-32.17.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.ppc64le"
},
"product_reference": "libarchive-devel-3.3.3-32.17.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.3-32.17.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.s390x"
},
"product_reference": "libarchive-devel-3.3.3-32.17.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.3-32.17.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64"
},
"product_reference": "libarchive-devel-3.3.3-32.17.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.3-32.17.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.aarch64"
},
"product_reference": "libarchive13-3.3.3-32.17.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.3-32.17.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.ppc64le"
},
"product_reference": "libarchive13-3.3.3-32.17.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.3-32.17.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.s390x"
},
"product_reference": "libarchive13-3.3.3-32.17.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.3-32.17.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.x86_64"
},
"product_reference": "libarchive13-3.3.3-32.17.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.3-32.17.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64"
},
"product_reference": "libarchive-devel-3.3.3-32.17.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.3-32.17.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive13-3.3.3-32.17.1.x86_64"
},
"product_reference": "libarchive13-3.3.3-32.17.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-60753",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-60753"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service (Out-of-Memory crash).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive13-3.3.3-32.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-60753",
"url": "https://www.suse.com/security/cve/CVE-2025-60753"
},
{
"category": "external",
"summary": "SUSE Bug 1253088 for CVE-2025-60753",
"url": "https://bugzilla.suse.com/1253088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive13-3.3.3-32.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive13-3.3.3-32.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-03T11:46:40Z",
"details": "moderate"
}
],
"title": "CVE-2025-60753"
},
{
"cve": "CVE-2026-4424",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4424"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive13-3.3.3-32.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4424",
"url": "https://www.suse.com/security/cve/CVE-2026-4424"
},
{
"category": "external",
"summary": "SUSE Bug 1259927 for CVE-2026-4424",
"url": "https://bugzilla.suse.com/1259927"
},
{
"category": "external",
"summary": "SUSE Bug 1265940 for CVE-2026-4424",
"url": "https://bugzilla.suse.com/1265940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive13-3.3.3-32.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive13-3.3.3-32.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-03T11:46:40Z",
"details": "important"
}
],
"title": "CVE-2026-4424"
},
{
"cve": "CVE-2026-4426",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4426"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to incorrect memory allocation and potential application crashes, resulting in a denial-of-service (DoS) condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive13-3.3.3-32.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4426",
"url": "https://www.suse.com/security/cve/CVE-2026-4426"
},
{
"category": "external",
"summary": "SUSE Bug 1259930 for CVE-2026-4426",
"url": "https://bugzilla.suse.com/1259930"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive13-3.3.3-32.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive13-3.3.3-32.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-03T11:46:40Z",
"details": "important"
}
],
"title": "CVE-2026-4426"
},
{
"cve": "CVE-2026-5121",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5121"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive13-3.3.3-32.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5121",
"url": "https://www.suse.com/security/cve/CVE-2026-5121"
},
{
"category": "external",
"summary": "SUSE Bug 1261184 for CVE-2026-5121",
"url": "https://bugzilla.suse.com/1261184"
},
{
"category": "external",
"summary": "SUSE Bug 1265940 for CVE-2026-5121",
"url": "https://bugzilla.suse.com/1265940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive13-3.3.3-32.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive-devel-3.3.3-32.17.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libarchive13-3.3.3-32.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-03T11:46:40Z",
"details": "important"
}
],
"title": "CVE-2026-5121"
}
]
}
ubuntu-cve-2026-5121
Vulnerability from osv_ubuntu
Published
2026-03-30 08:16
Modified
2026-05-21 19:34
Summary
Details
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.
Severity
9.8 (Critical)
7.5 (High)
N/A (UNKNOWN)
References
{
"affected": [
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "bsdcpio",
"binary_version": "3.1.2-7ubuntu2.8+esm5"
},
{
"binary_name": "bsdtar",
"binary_version": "3.1.2-7ubuntu2.8+esm5"
},
{
"binary_name": "libarchive13",
"binary_version": "3.1.2-7ubuntu2.8+esm5"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:14.04:LTS",
"name": "libarchive",
"purl": "pkg:deb/ubuntu/libarchive@3.1.2-7ubuntu2.8+esm5?arch=source\u0026distro=esm-infra-legacy/trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.1.2-7ubuntu2.8+esm5"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.1.2-5ubuntu1",
"3.1.2-7ubuntu1",
"3.1.2-7ubuntu2",
"3.1.2-7ubuntu2.1",
"3.1.2-7ubuntu2.2",
"3.1.2-7ubuntu2.3",
"3.1.2-7ubuntu2.4",
"3.1.2-7ubuntu2.6",
"3.1.2-7ubuntu2.7",
"3.1.2-7ubuntu2.8",
"3.1.2-7ubuntu2.8+esm1",
"3.1.2-7ubuntu2.8+esm3",
"3.1.2-7ubuntu2.8+esm4"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "bsdcpio",
"binary_version": "3.1.2-11ubuntu0.16.04.8+esm3"
},
{
"binary_name": "bsdtar",
"binary_version": "3.1.2-11ubuntu0.16.04.8+esm3"
},
{
"binary_name": "libarchive13",
"binary_version": "3.1.2-11ubuntu0.16.04.8+esm3"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "libarchive",
"purl": "pkg:deb/ubuntu/libarchive@3.1.2-11ubuntu0.16.04.8+esm3?arch=source\u0026distro=esm-infra-legacy/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.1.2-11ubuntu0.16.04.8+esm3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.1.2-11build1",
"3.1.2-11ubuntu0.16.04.1",
"3.1.2-11ubuntu0.16.04.2",
"3.1.2-11ubuntu0.16.04.3",
"3.1.2-11ubuntu0.16.04.4",
"3.1.2-11ubuntu0.16.04.5",
"3.1.2-11ubuntu0.16.04.6",
"3.1.2-11ubuntu0.16.04.7",
"3.1.2-11ubuntu0.16.04.8",
"3.1.2-11ubuntu0.16.04.8+esm1",
"3.1.2-11ubuntu0.16.04.8+esm2"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "bsdcpio",
"binary_version": "3.2.2-3.1ubuntu0.7+esm3"
},
{
"binary_name": "bsdtar",
"binary_version": "3.2.2-3.1ubuntu0.7+esm3"
},
{
"binary_name": "libarchive-tools",
"binary_version": "3.2.2-3.1ubuntu0.7+esm3"
},
{
"binary_name": "libarchive13",
"binary_version": "3.2.2-3.1ubuntu0.7+esm3"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "libarchive",
"purl": "pkg:deb/ubuntu/libarchive@3.2.2-3.1ubuntu0.7+esm3?arch=source\u0026distro=esm-infra/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.2.2-3.1ubuntu0.7+esm3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.2.2-3.1",
"3.2.2-3.1ubuntu0.1",
"3.2.2-3.1ubuntu0.2",
"3.2.2-3.1ubuntu0.3",
"3.2.2-3.1ubuntu0.4",
"3.2.2-3.1ubuntu0.5",
"3.2.2-3.1ubuntu0.6",
"3.2.2-3.1ubuntu0.7",
"3.2.2-3.1ubuntu0.7+esm1",
"3.2.2-3.1ubuntu0.7+esm2"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "libarchive-tools",
"binary_version": "3.4.0-2ubuntu1.5+esm2"
},
{
"binary_name": "libarchive13",
"binary_version": "3.4.0-2ubuntu1.5+esm2"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "libarchive",
"purl": "pkg:deb/ubuntu/libarchive@3.4.0-2ubuntu1.5+esm2?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.4.0-2ubuntu1.5+esm2"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.4.0-1",
"3.4.0-1build1",
"3.4.0-1ubuntu2",
"3.4.0-2ubuntu1",
"3.4.0-2ubuntu1.1",
"3.4.0-2ubuntu1.2",
"3.4.0-2ubuntu1.3",
"3.4.0-2ubuntu1.4",
"3.4.0-2ubuntu1.5",
"3.4.0-2ubuntu1.5+esm1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libarchive-tools",
"binary_version": "3.6.0-1ubuntu1.7"
},
{
"binary_name": "libarchive13",
"binary_version": "3.6.0-1ubuntu1.7"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "libarchive",
"purl": "pkg:deb/ubuntu/libarchive@3.6.0-1ubuntu1.7?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.6.0-1ubuntu1.7"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.4.3-2",
"3.4.3-2build1",
"3.5.2-1",
"3.5.2-1ubuntu1",
"3.6.0-1ubuntu1",
"3.6.0-1ubuntu1.1",
"3.6.0-1ubuntu1.2",
"3.6.0-1ubuntu1.3",
"3.6.0-1ubuntu1.4",
"3.6.0-1ubuntu1.5",
"3.6.0-1ubuntu1.6"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libarchive-tools",
"binary_version": "3.7.2-2ubuntu0.7"
},
{
"binary_name": "libarchive13t64",
"binary_version": "3.7.2-2ubuntu0.7"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "libarchive",
"purl": "pkg:deb/ubuntu/libarchive@3.7.2-2ubuntu0.7?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.7.2-2ubuntu0.7"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.6.2-1ubuntu1",
"3.7.2-1ubuntu1",
"3.7.2-1ubuntu2",
"3.7.2-1.1ubuntu2",
"3.7.2-2",
"3.7.2-2ubuntu0.1",
"3.7.2-2ubuntu0.2",
"3.7.2-2ubuntu0.3",
"3.7.2-2ubuntu0.4",
"3.7.2-2ubuntu0.5",
"3.7.2-2ubuntu0.6"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libarchive-tools",
"binary_version": "3.7.7-0ubuntu3.2"
},
{
"binary_name": "libarchive13t64",
"binary_version": "3.7.7-0ubuntu3.2"
}
]
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "libarchive",
"purl": "pkg:deb/ubuntu/libarchive@3.7.7-0ubuntu3.2?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.7.7-0ubuntu3.2"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.7.7-0ubuntu2",
"3.7.7-0ubuntu2.1",
"3.7.7-0ubuntu2.2",
"3.7.7-0ubuntu3",
"3.7.7-0ubuntu3.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libarchive-tools",
"binary_version": "3.8.5-1ubuntu2.1"
},
{
"binary_name": "libarchive13t64",
"binary_version": "3.8.5-1ubuntu2.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "libarchive",
"purl": "pkg:deb/ubuntu/libarchive@3.8.5-1ubuntu2.1?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.8.5-1ubuntu2.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.7.7-0ubuntu3",
"3.8.5-1ubuntu1",
"3.8.5-1ubuntu2"
]
}
],
"aliases": [],
"details": "A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.",
"id": "UBUNTU-CVE-2026-5121",
"modified": "2026-05-21T19:34:32Z",
"published": "2026-03-30T08:16:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-5121"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5121"
},
{
"type": "REPORT",
"url": "https://github.com/libarchive/libarchive/pull/2934"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-5121"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8292-1"
}
],
"related": [
"USN-8292-1"
],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-5121"
]
}
VDE-2026-088
Vulnerability from csaf_mettlertoledogmbh - Published: 2026-08-25 13:00 - Updated: 2026-08-25 13:00Summary
METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.4
Notes
Summary: Multiple vulnerabilities have been discovered in LabX Standard versions 21.3.22 - 21.4.23. The vulnerabilities CVE-2025-69419, CVE-2026-0915, CVE-2025-15467 are fixed in LabX Standard v21.4.25. All other vulnerabilities are to be fixed in the upcoming releases.
Notice: LabX Standard was formerly known as LabX Cloud Local.
Impact: The identified vulnerabilities may expose the system to risks such as denial-of-service, authentication/certificate validation bypass, memory corruption, confidentiality loss, and potential remote code execution.
Remediation: For Vulnerabilities CVE-2025-69419, CVE-2026-0915, CVE-2025-15467 update all LabX Standard installations to 21.4.25 to address and resolve the vulnerabilities.
Disclaimer: Your use of the information on this document or materials linked from this document is at your own risk. METTLER TOLEDO makes reasonable efforts to ensure the accuracy of the information but does not grant any warranty, express or implied, including warranties of merchantability or fitness for a particular purpose. To the extent permitted by applicable law, METTLER TOLEDO excludes liability for any loss, claim, expense or damage arising from or related to the statements in this document. METTLER TOLEDO reserves the right to change or update this document at any time.
Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard versions 21.3.22 - 21.4.23
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:*:*:*:*:*:*:*:*
|
vers:intdot/>=21.3.22|<=21.4.23 |
Vendor Fix
|
Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard versions 21.3.22 - 21.4.23
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:*:*:*:*:*:*:*:*
|
vers:intdot/>=21.3.22|<=21.4.23 |
Vendor Fix
|
Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard versions 21.3.22 - 21.4.23
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:*:*:*:*:*:*:*:*
|
vers:intdot/>=21.3.22|<=21.4.23 |
Vendor Fix
|
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not reinitialized between files processed in the same invocation. By decompressing a specially crafted LZW file followed by a specially crafted LZH file in a single gzip -d command, an attacker can poison the shared global state and subsequently trigger an out-of-bounds read in the LZH decoder. This issue has been fixed in commit 63dbf6b3b9e6e781df1a6a64e609b10e23969681.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.
7.3 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
GnuTLS: certificate validation bypass due to improper handling of URI and SRV SANs. Improper handling of certain Subject Alternative Name types can allow a certificate validation bypass under specific conditions.
7.1 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. In merge_handshake_packet(), incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.
7.8 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
An integer overflow vulnerability affecting the pcre2test utility in PCRE2 versions before 10.41. The issue occurs when processing negative repeat values in the pcre2test subject line, which can trigger an integer overflow condition leading to infinite looping and denial of service through resource exhaustion.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted regular expression. Exploitation requires an application to take regular expressions as untrusted input.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Mitigation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types, allowing the webbrowser.open() API to have commands injected into the underlying shell.
7.1 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model, a C stack overflow occurs.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.
7.8 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network. The issue spans multiple ASP.NET Core subsystems in .NET 8.0, .NET 9.0, and .NET 10.0.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the application to treat a non-answer section of the DNS response as a valid answer.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
A stack buffer overflow vulnerability was discovered in International Components for Unicode (ICU) affecting the SRBRoot::addTag function when running the genrb binary, where the 'subtag' struct can overflow. If successfully exploited, this can lead to memory corruption and potential local arbitrary code execution.
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
When an application drives an AES-OCB context through the public EVP_Cipher() one-shot interface, the application-supplied initialisation vector (IV) is silently discarded. Every message encrypted under the same key uses the same effective nonce regardless of the IV supplied by the caller, resulting in (key, nonce) reuse and loss of confidentiality. If the same code path is used to compute the authentication tag, the tag depends only on the (key, IV) pair and not on the plaintext or ciphertext, allowing universal forgery of arbitrary ciphertext from a single captured message.
9.1 (Critical)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. An integer truncation in OpenSSL's ASN.1 decoder causes the content length of a primitive element to be mishandled, which may crash the application or load adjacent heap memory into the decoded object. Applications passing attacker-supplied data to d2i_X509(), d2i_PKCS7(), or any other d2i_* decoding function are affected.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The kek_unwrap_key() function validates the wrapping cipher's block length before performing an RFC 3211 check-byte test but does not verify the cipher is actually a block cipher. When an attacker selects a stream-mode cipher via the PWRI keyEncryptionAlgorithm OID, the length guard is ineffective and the allocated buffer can be smaller than required, producing a heap over-read. Applications calling CMS_decrypt() or CMS_decrypt_set1_password() on untrusted CMS data are affected.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
On 32-bit systems, an integer overflow vulnerability exists in libarchive's zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0) and other Kiota libraries fails to strip sensitive HTTP headers when following 3xx redirects to a different host or scheme. Only the Authorization header is removed; Cookie, Proxy-Authorization, and all custom headers are forwarded to the redirect target.
6.8 (Medium)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.
CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Validating certificate chains which contain DSA public keys can cause programs to panic, due to an interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker using crafted manipulations that ensure the worst case is reached.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containing many unique query parameters can cause excessive memory consumption.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of a path is a symbolic link and the path ends in /. For example, root.Open("symlink/") will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.
7.3 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is too small during iconv E2BIG reallocation, the reallocation logic miscalculates the remaining space, leading to a heap buffer overflow that can be exploited via a maliciously crafted server response.
7.1 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase.
7.1 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
References
4 references
Acknowledgments
{
"document": {
"acknowledgments": [
{
"organization": "CERT@VDE",
"summary": "coordination",
"urls": [
"https://certvde.com"
]
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-GB",
"notes": [
{
"category": "summary",
"text": "Multiple vulnerabilities have been discovered in LabX Standard versions 21.3.22 - 21.4.23. The vulnerabilities CVE-2025-69419, CVE-2026-0915, CVE-2025-15467 are fixed in LabX Standard v21.4.25. All other vulnerabilities are to be fixed in the upcoming releases.\n\nNotice: LabX Standard was formerly known as LabX Cloud Local.",
"title": "Summary"
},
{
"category": "description",
"text": "The identified vulnerabilities may expose the system to risks such as denial-of-service, authentication/certificate validation bypass, memory corruption, confidentiality loss, and potential remote code execution.",
"title": "Impact"
},
{
"category": "description",
"text": "For Vulnerabilities CVE-2025-69419, CVE-2026-0915, CVE-2025-15467 update all LabX Standard installations to 21.4.25 to address and resolve the vulnerabilities.",
"title": "Remediation"
},
{
"category": "legal_disclaimer",
"text": "Your use of the information on this document or materials linked from this document is at your own risk. METTLER TOLEDO makes reasonable efforts to ensure the accuracy of the information but does not grant any warranty, express or implied, including warranties of merchantability or fitness for a particular purpose. To the extent permitted by applicable law, METTLER TOLEDO excludes liability for any loss, claim, expense or damage arising from or related to the statements in this document. METTLER TOLEDO reserves the right to change or update this document at any time.",
"title": "Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "psirt@mt.com",
"name": "Mettler-Toledo GmbH",
"namespace": "https://www.mt.com"
},
"references": [
{
"category": "external",
"summary": "Product security website of METTLER TOLEDO",
"url": "https://www.mt.com/ph/en/home/site_content/product-security.html"
},
{
"category": "external",
"summary": "CERT@VDE Security Advisories for METTLER TOLEDO",
"url": "https://certvde.com/en/advisories/vendor/mettler-toledo/"
},
{
"category": "self",
"summary": "VDE-2026-088: METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.4 - HTML",
"url": "https://certvde.com/en/advisories/VDE-2026-088/"
},
{
"category": "self",
"summary": "VDE-2026-088: METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.4 - CSAF",
"url": "https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json"
}
],
"title": "METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.4",
"tracking": {
"aliases": [
"VDE-2026-088"
],
"current_release_date": "2026-08-25T13:00:00.000Z",
"generator": {
"date": "2026-08-25T13:00:00.000Z",
"engine": {
"name": "Secvisogram",
"version": "2.6.8"
}
},
"id": "VDE-2026-088",
"initial_release_date": "2026-08-25T13:00:00.000Z",
"revision_history": [
{
"date": "2026-08-25T13:00:00.000Z",
"number": "1.0.0",
"summary": "Initial revision"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003e=21.3.22|\u003c=21.4.23",
"product": {
"name": "LabX Standard versions 21.3.22 - 21.4.23",
"product_id": "CSAFPID-51000",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mettler_toledo:labx_standard:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version",
"name": "21.4.25",
"product": {
"name": "LabX Standard 21.4.25",
"product_id": "CSAFPID-52000",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "LabX Standard"
}
],
"category": "product_family",
"name": "Software"
}
],
"category": "vendor",
"name": "METTLER TOLEDO"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-69419",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "description",
"text": "Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-52000"
],
"known_affected": [
"CSAFPID-51000"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to LabX Standard v21.4.25",
"product_ids": [
"CSAFPID-51000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 7.4,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.4,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-51000"
]
}
],
"title": "Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion"
},
{
"cve": "CVE-2026-0915",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "description",
"text": "Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library\u0027s DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-52000"
],
"known_affected": [
"CSAFPID-51000"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to LabX Standard v21.4.25",
"product_ids": [
"CSAFPID-51000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 7.5,
"environmentalSeverity": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.5,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-51000"
]
}
],
"title": "getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler"
},
{
"cve": "CVE-2025-15467",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "description",
"text": "Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-52000"
],
"known_affected": [
"CSAFPID-51000"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to LabX Standard v21.4.25",
"product_ids": [
"CSAFPID-51000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 8.8,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 8.8,
"temporalSeverity": "HIGH",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-51000"
]
}
],
"title": "Stack buffer overflow in CMS (Auth)EnvelopedData parsing"
},
{
"cve": "CVE-2025-58187",
"cwe": {
"id": "CWE-407",
"name": "Inefficient Algorithmic Complexity"
},
"notes": [
{
"category": "description",
"text": "Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains",
"title": "CVE description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"environmentalScore": 7.5,
"environmentalSeverity": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.5,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Quadratic complexity in Go crypto/x509 name constraint checking"
},
{
"cve": "CVE-2026-41992",
"cwe": {
"id": "CWE-126",
"name": "Buffer Over-read"
},
"notes": [
{
"category": "description",
"text": "GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not reinitialized between files processed in the same invocation. By decompressing a specially crafted LZW file followed by a specially crafted LZH file in a single gzip -d command, an attacker can poison the shared global state and subsequently trigger an out-of-bounds read in the LZH decoder. This issue has been fixed in commit 63dbf6b3b9e6e781df1a6a64e609b10e23969681.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Global buffer over-read in GNU gzip LZH decompression via shared decoder state"
},
{
"cve": "CVE-2026-5435",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "description",
"text": "The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Out-of-bounds write in glibc deprecated DNS resolver print functions (TSIG record handling)"
},
{
"cve": "CVE-2026-4424",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "description",
"text": "A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Heap out-of-bounds read in libarchive RAR decompression (LZSS sliding window)"
},
{
"cve": "CVE-2026-42012",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "description",
"text": "GnuTLS: certificate validation bypass due to improper handling of URI and SRV SANs. Improper handling of certain Subject Alternative Name types can allow a certificate validation bypass under specific conditions.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Certificate validation bypass in GnuTLS via improper URI/SRV SAN handling"
},
{
"cve": "CVE-2026-33846",
"cwe": {
"id": "CWE-130",
"name": "Improper Handling of Length Parameter Inconsistency"
},
"notes": [
{
"category": "description",
"text": "A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. In merge_handshake_packet(), incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Heap buffer overflow in GnuTLS DTLS handshake fragment reassembly"
},
{
"cve": "CVE-2026-42009",
"cwe": {
"id": "CWE-475",
"name": "Undefined Behavior for Input to API"
},
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Denial of service in GnuTLS DTLS packet reordering comparator (duplicate sequence numbers)"
},
{
"cve": "CVE-2025-69720",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "description",
"text": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Stack-based buffer overflow in ncurses infocmp analyze_string()"
},
{
"cve": "CVE-2022-41409",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "description",
"text": "An integer overflow vulnerability affecting the pcre2test utility in PCRE2 versions before 10.41. The issue occurs when processing negative repeat values in the pcre2test subject line, which can trigger an integer overflow condition leading to infinite looping and denial of service through resource exhaustion.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Integer overflow in PCRE2 pcre2test utility via negative repeat values"
},
{
"cve": "CVE-2017-11164",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"notes": [
{
"category": "description",
"text": "In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted regular expression. Exploitation requires an application to take regular expressions as untrusted input.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Stack exhaustion in PCRE via uncontrolled recursion (OP_KETRMAX)"
},
{
"cve": "CVE-2026-4786",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"notes": [
{
"category": "description",
"text": "Mitigation of CVE-2026-4519 was incomplete. If the URL contained \"%action\" the mitigation could be bypassed for certain browser types, allowing the webbrowser.open() API to have commands injected into the underlying shell.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Command injection in Python webbrowser.open() via incomplete URL mitigation bypass"
},
{
"cve": "CVE-2026-3644",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "description",
"text": "The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Improper input validation in Python http.cookies.Morsel allows control character injection"
},
{
"cve": "CVE-2026-4224",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"notes": [
{
"category": "description",
"text": "When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model, a C stack overflow occurs.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Stack overflow in Expat XML parser via deeply nested DTD content model"
},
{
"cve": "CVE-2026-11822",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "description",
"text": "SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Memory corruption in SQLite FTS5 extension via malformed page data"
},
{
"cve": "CVE-2026-42899",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "description",
"text": "Loop with unreachable exit condition (\u0027infinite loop\u0027) in ASP.NET Core allows an unauthorized attacker to deny service over a network. The issue spans multiple ASP.NET Core subsystems in .NET 8.0, .NET 9.0, and .NET 10.0.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Denial of service in ASP.NET Core via infinite loop"
},
{
"cve": "CVE-2026-4437",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "description",
"text": "Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library\u0027s DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the application to treat a non-answer section of the DNS response as a valid answer.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Out-of-bounds read in glibc DNS backend via crafted DNS response (gethostbyaddr)"
},
{
"cve": "CVE-2026-4046",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"notes": [
{
"category": "description",
"text": "The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Reachable assertion in glibc iconv() via IBM1390/IBM1399 character set conversion"
},
{
"cve": "CVE-2025-5222",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "description",
"text": "A stack buffer overflow vulnerability was discovered in International Components for Unicode (ICU) affecting the SRBRoot::addTag function when running the genrb binary, where the \u0027subtag\u0027 struct can overflow. If successfully exploited, this can lead to memory corruption and potential local arbitrary code execution.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Stack buffer overflow in ICU genrb SRBRoot::addTag"
},
{
"cve": "CVE-2026-45445",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"notes": [
{
"category": "description",
"text": "When an application drives an AES-OCB context through the public EVP_Cipher() one-shot interface, the application-supplied initialisation vector (IV) is silently discarded. Every message encrypted under the same key uses the same effective nonce regardless of the IV supplied by the caller, resulting in (key, nonce) reuse and loss of confidentiality. If the same code path is used to compute the authentication tag, the tag depends only on the (key, IV) pair and not on the plaintext or ciphertext, allowing universal forgery of arbitrary ciphertext from a single captured message.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "IV reuse and forgery in OpenSSL AES-OCB via EVP_Cipher() one-shot interface"
},
{
"cve": "CVE-2026-34180",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "description",
"text": "Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. An integer truncation in OpenSSL\u0027s ASN.1 decoder causes the content length of a primitive element to be mishandled, which may crash the application or load adjacent heap memory into the decoded object. Applications passing attacker-supplied data to d2i_X509(), d2i_PKCS7(), or any other d2i_* decoding function are affected.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Heap buffer over-read in OpenSSL ASN.1 decoder via oversized DER element"
},
{
"cve": "CVE-2026-9076",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "description",
"text": "The kek_unwrap_key() function validates the wrapping cipher\u0027s block length before performing an RFC 3211 check-byte test but does not verify the cipher is actually a block cipher. When an attacker selects a stream-mode cipher via the PWRI keyEncryptionAlgorithm OID, the length guard is ineffective and the allocated buffer can be smaller than required, producing a heap over-read. Applications calling CMS_decrypt() or CMS_decrypt_set1_password() on untrusted CMS data are affected.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Heap buffer over-read in OpenSSL CMS PWRI key unwrap (kek_unwrap_key)"
},
{
"cve": "CVE-2026-5121",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "description",
"text": "On 32-bit systems, an integer overflow vulnerability exists in libarchive\u0027s zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Integer overflow in libarchive zisofs block pointer allocation (32-bit)"
},
{
"cve": "CVE-2026-45591",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "description",
"text": "Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
"title": "CVE description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"environmentalScore": 7.5,
"environmentalSeverity": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.5,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Denial of service in ASP.NET Core SignalR/Blazor via nested MessagePack arrays"
},
{
"cve": "CVE-2026-44503",
"cwe": {
"id": "CWE-601",
"name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
},
"notes": [
{
"category": "description",
"text": "The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0) and other Kiota libraries fails to strip sensitive HTTP headers when following 3xx redirects to a different host or scheme. Only the Authorization header is removed; Cookie, Proxy-Authorization, and all custom headers are forwarded to the redirect target."
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"environmentalScore": 6.8,
"environmentalSeverity": "MEDIUM",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"temporalScore": 6.8,
"temporalSeverity": "MEDIUM",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Kiota RedirectHandler header-leak issue"
},
{
"cve": "CVE-2025-47907",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "description",
"text": "Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Race condition in Go database/sql Rows.Scan during concurrent query cancellation"
},
{
"cve": "CVE-2025-58188",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "description",
"text": "Validating certificate chains which contain DSA public keys can cause programs to panic, due to an interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Panic in Go crypto/x509 when validating certificate chains containing DSA public keys"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "description",
"text": "Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Quadratic-time resource exhaustion in Go crypto/x509 HostnameError.Error()"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-407",
"name": "Inefficient Algorithmic Complexity"
},
"notes": [
{
"category": "description",
"text": "Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker using crafted manipulations that ensure the worst case is reached.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "CPU exhaustion in Go MIME header decoding via invalid encoded-words"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "description",
"text": "When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Double-free in Go cgo DNS resolver LookupCNAME via long CNAME response"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "description",
"text": "During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Unbounded resource consumption in Go crypto/x509 certificate chain building"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "description",
"text": "The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containing many unique query parameters can cause excessive memory consumption.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Unbounded memory consumption in Go net/url query parameter parsing"
},
{
"cve": "CVE-2025-61723",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "description",
"text": "The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Non-linear processing time in Go PEM parsing of invalid inputs"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "description",
"text": "Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "CPU and memory exhaustion in Go net/mail ParseAddress/ParseAddressList/ParseDate"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "description",
"text": "If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "TLS 1.3 connection deadlock via repeated post-handshake key update messages"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "description",
"text": "When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Infinite loop in Go HTTP/2 transport via SETTINGS_MAX_FRAME_SIZE of 0"
},
{
"cve": "CVE-2026-39822",
"cwe": {
"id": "CWE-61",
"name": "UNIX Symbolic Link (Symlink) Following"
},
"notes": [
{
"category": "description",
"text": "On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of a path is a symbolic link and the path ends in /. For example, root.Open(\"symlink/\") will open \"symlink\" even when \"symlink\" is a symbolic link pointing outside of the root.",
"title": "CVE Description"
},
{
"category": "other",
"text": "NVD has not yet published a CVSS score for this CVE at the time of research (published 2026-07-07, still awaiting enrichment). Score left unset rather than estimated; update once NVD/CNA enrichment completes.",
"title": "Scoring Note"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"environmentalScore": 7.3,
"environmentalSeverity": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.3,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "os.Root symlink escape via trailing slash on final path component (Go)"
},
{
"cve": "CVE-2026-58471",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "description",
"text": "GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is too small during iconv E2BIG reallocation, the reallocation logic miscalculates the remaining space, leading to a heap buffer overflow that can be exploited via a maliciously crafted server response.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Heap buffer overflow in GNU Wget convert_fname() via server-supplied filename"
},
{
"cve": "CVE-2026-58472",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "description",
"text": "GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Integer overflow leading to heap buffer overflow in GNU Wget html_quote_string()"
},
{
"cve": "CVE-2026-58469",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "description",
"text": "GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Heap buffer underread in GNU Wget clean_metalink_string() via whitespace-only URL"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…