Security update for libarchive

The libarchive update fixes several security-related bugs: an out-of-bounds buffer overrun related to p[H_LEVEL_OFFSET], buffer overrun in archive_le32dec when reading truncated 7zip headers, NULL pointer dereference in archive_acl_from_text_w(), segmentation fault in check_7zip_header_in_sfx due to ELF offset validation, out-of-bounds access on ELF 64-bit headers, a memory leak in RAR5 with many filters, and a file descriptor leak in mtree parser cleanup. It also corrects the creation of temporary files in the target directory. These fixes address potential stability and security issues in libarchive.

The vulnerabilities could lead to crashes (segmentation faults), memory corruption, resource leaks, and potentially undefined behavior when processing certain archive formats or malformed inputs. While no active exploits are known, these issues could be leveraged to disrupt applications using libarchive or cause denial of service conditions.

A security update has been released that fixes these issues. Users and administrators should apply the official libarchive update provided by SUSE Product Security Team to remediate these vulnerabilities. No additional mitigation steps are indicated.