[CLSA-2026:1792818643] libarchive: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-24 05:10:55 UTC
Description:
- CVE-2021-23177: fix extraction of ACLs to the symlink target instead of the link - CVE-2021-31566: do not follow symlinks when fixing up permissions and file flags - CVE-2026-5121: validate pz_log2_bs in the iso9660 zisofs reader
Updated packages:
  • libarchive-2.8.3-7.el6_8.tuxcare.els1.i686.rpm
    sha:bb2636cfeb4ed9ca885af4021902d4c835367d0635a9096c242427539e84e867
  • libarchive-2.8.3-7.el6_8.tuxcare.els1.x86_64.rpm
    sha:356552060d7d3a38218c38501350f4a5c711e0632b3480a0b8663892f8c7ce40
  • libarchive-devel-2.8.3-7.el6_8.tuxcare.els1.i686.rpm
    sha:d178ceb19f8e1a1a610bc11ac4cb2a90496dc94f3ccd01adc26d6dbae0a5b4aa
  • libarchive-devel-2.8.3-7.el6_8.tuxcare.els1.x86_64.rpm
    sha:c2ec078ee58fcaebe3081a934f4b340b265b11340ded3946ed5226d04dad6655
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.