shield Security update for libarchive

SUSE-SLE-Micro-6.0-427

This update for libarchive fixes the following issues: - CVE-2025-5914: Fixed double free due to an integer overflow in the archive_read_format_rar_seek_data() function (bsc#1244272) - CVE-2025-5915: Fixed heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c (bsc#1244273) - CVE-2025-5916: Fixed integer overflow while reading warc files at archive_read_support_format_warc.c (bsc#1244270) - CVE-2025-5917: Fixed off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c (bsc#1244336) - CVE-2025-5918: Fixed past EOF read triggered for piped file streams (bsc#1244279)

• Release Date
  Aug 20 2025
• References
  Bugzilla: 1244270, 1244272, 1244273, 1244279, 1244336
  CVEs: CVE-2025-5914, CVE-2025-5915, CVE-2025-5916, CVE-2025-5917, CVE-2025-5918
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Micro 6.0 s390x

• Packages
  libarchive13
  Library to work with several different streaming archive formats

  3.6.2-5.1 lock rpm

SUSE Linux Micro 6.0 x86_64

• Packages
  libarchive13
  Library to work with several different streaming archive formats

  3.6.2-5.1 lock rpm

SUSE Linux Micro 6.0 aarch64

• Packages
  libarchive13
  Library to work with several different streaming archive formats

  3.6.2-5.1 lock rpm