Skip to main content
VulnerabilityPublished Updated

SUSE · Security update for libarchive

Affects SUSESource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 26 Oct 2026, 16:19 UTC

What to do

Affected software

ProductAffectedFixed in
SUSE Product Security Team SUSEAffected
  • SUSE
  • aarch64
  • bsdtar-3.8.1-160000.4.1.aarch64
  • libarchive-devel-3.8.1-160000.4.1.aarch64
  • libarchive13-3.8.1-160000.4.1.aarch64
  • bsdtar-0:3.8.1-160000.4.1.aarch64
  • libarchive-devel-0:3.8.1-160000.4.1.aarch64
  • libarchive13-0:3.8.1-160000.4.1.aarch64
Fixed in–

AI-suggested

A security update is available that addresses all listed issues. Users should apply the official libarchive update from SUSE Product Security Team to remediate these vulnerabilities. No additional mitigation steps are specified or required beyond applying the update.

Description

A security update for libarchive addresses multiple vulnerabilities including buffer overruns, NULL pointer dereferences, segmentation faults, memory leaks, and file descriptor leaks. These issues affect various archive formats such as 7zip, ELF, and RAR5. The update fixes out-of-bounds accesses and resource leaks that could lead to crashes or unstable behavior.

References

Community reviews

Loading reviews…