[CLSA-2026:1792167585] libarchive: Fix of 7 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-16 16:20:02 UTC
Description:
- Rebase onto Oracle 3.1.2-14.0.3.el7_9: take Oracle's CVE-2025-5914, CVE-2026-4424 and CVE-2026-5121 patches in place of ours; keep only the extra CVE-2026-4424 copy_from_lzss_window() bounds check - Build el7 targets with the .el7_9 dist
Updated packages:
  • bsdcpio-3.1.2-14.0.4.el7_9.tuxcare.els2.i686.rpm
    sha:8f2f87ebf05a4d75cce0258ed1b2c569c65b0ffa1bd2dc8615de30c1eb4523f9
  • bsdcpio-3.1.2-14.0.4.el7_9.tuxcare.els2.x86_64.rpm
    sha:9e719c364391cf21da66d52b2aa9b4dcf65ec53a64fd2f8743640f825d2ea2fe
  • bsdtar-3.1.2-14.0.4.el7_9.tuxcare.els2.i686.rpm
    sha:e42635bfad325ed7245d483120fc4876a1f0a3c13f2a85468cf7a3ad1d1c6d62
  • bsdtar-3.1.2-14.0.4.el7_9.tuxcare.els2.x86_64.rpm
    sha:e93e7bf78c181cf8616f445b6c1aa35643b4714caeaba829ff24535a5b8d8570
  • libarchive-3.1.2-14.0.4.el7_9.tuxcare.els2.i686.rpm
    sha:5df6a1081bf26de17694c08deb82c7d90a4703a5f42f701871fc4b05a8962dfc
  • libarchive-3.1.2-14.0.4.el7_9.tuxcare.els2.x86_64.rpm
    sha:7f33cab8885e44d3d42ff6712483832e2eb135d03c3796004a25b0bf51cd2fb8
  • libarchive-devel-3.1.2-14.0.4.el7_9.tuxcare.els2.i686.rpm
    sha:c7845e6804cf949d4d9e61cc80da43bd66103daa509562433045015fb0a4668b
  • libarchive-devel-3.1.2-14.0.4.el7_9.tuxcare.els2.x86_64.rpm
    sha:44d863ed5d2a7b86b5c18778ad5bd2165096e25ea6668f39c369966d9d002be7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.