shield Security update for libarchive

SUSE-SLE-Micro-6.1-214

This update for libarchive fixes the following issues: - CVE-2025-5918: reading past EOF may be triggered for piped file streams (bsc#1244279) - CVE-2025-5917: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c (bsc#1244336) - CVE-2025-5916: integer overflow while reading warc files at archive_read_support_format_warc.c (bsc#1244270) - CVE-2025-5915: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c (bsc#1244273) - CVE-2025-5914: double free due to an integer overflow in the archive_read_format_rar_seek_data() function (bsc#1244272)

Release Date

Aug 14 2025
References

Bugzilla: 1244270, 1244272, 1244273, 1244279, 1244336
CVEs: CVE-2025-5914, CVE-2025-5915, CVE-2025-5916, CVE-2025-5917, CVE-2025-5918
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Micro 6.1 s390x

Packages

libarchive13
Library to work with several different streaming archive formats

3.7.4-slfo.1.1_3.1 lock rpm

SUSE Linux Micro 6.1 ppc64le

Packages

libarchive13
Library to work with several different streaming archive formats

3.7.4-slfo.1.1_3.1 lock rpm

SUSE Linux Micro 6.1 x86_64

Packages

libarchive13
Library to work with several different streaming archive formats

3.7.4-slfo.1.1_3.1 lock rpm

SUSE Linux Micro 6.1 aarch64

Packages

libarchive13
Library to work with several different streaming archive formats

3.7.4-slfo.1.1_3.1 lock rpm