[CLSA-2026:1792166415] libarchive: Fix of 7 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-23 05:46:15 UTC
Description:
- Rebase onto Oracle 3.1.2-14.0.3.el7_9: take Oracle's CVE-2025-5914, CVE-2026-4424 and CVE-2026-5121 patches in place of ours; keep only the extra CVE-2026-4424 copy_from_lzss_window() bounds check - Build el7 targets with the .el7_9 dist
Updated packages:
  • bsdcpio-3.1.2-14.0.4.el7_9.tuxcare.els2.i686.rpm
    sha:4eaa56029741fb17c5167197c60e72ef31ae17e18a273962699204a6b3236343
  • bsdcpio-3.1.2-14.0.4.el7_9.tuxcare.els2.x86_64.rpm
    sha:588cb52204d041b37785656b9833d67554a54e902c0ec57f6fbdb3c88cb5d9e5
  • bsdtar-3.1.2-14.0.4.el7_9.tuxcare.els2.i686.rpm
    sha:fac2b6dec0be369d38f826c999a9fef2f02e2330e8c95b3db231934079d46d4b
  • bsdtar-3.1.2-14.0.4.el7_9.tuxcare.els2.x86_64.rpm
    sha:8f4b2c388af861e23c2cbb66c85fd80728bea958702ef5d23b935db10c20d493
  • libarchive-3.1.2-14.0.4.el7_9.tuxcare.els2.i686.rpm
    sha:34150330b80064aab8a20fc4a715c9f00ec7fb1a53016bda586a60be2cf5970f
  • libarchive-3.1.2-14.0.4.el7_9.tuxcare.els2.x86_64.rpm
    sha:c72bf05d8b867cab355611f6213d1cf054f29d87a50b86f74601062fee7b9678
  • libarchive-devel-3.1.2-14.0.4.el7_9.tuxcare.els2.i686.rpm
    sha:27890b7b54eff49232d657d61ccb0c90c2ad541455a9cdfa5024243b16a2f76f
  • libarchive-devel-3.1.2-14.0.4.el7_9.tuxcare.els2.x86_64.rpm
    sha:db52ae06da0cc270851d8eb5cf1121fa118ba9407f0bd2a799fafcf418ca7fac
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.