CLSA-2025-1766232351

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2025-1766232351.json
JSON Data
https://api.test.osv.dev/v1/vulns/CLSA-2025-1766232351
Upstream
Published
2026-02-09T17:32:46Z
Modified
2026-05-27T11:17:39.107875131Z
Summary
libarchive: Fix of 3 CVEs
Details
  • CVE-2025-5916: fix signed integer overflow in WARC format reader
  • CVE-2025-5917: fix buffer overflow in buildustarentry for PAX format
  • CVE-2025-5918: prevent skipping past EOF in archive file reading
References

Affected packages

TuxCare:AlmaLinux:9.6
bsdcat

Package

Name
bsdcat
Purl
pkg:rpm/tuxcare/bsdcat?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.5.3-6.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2025-1766232351.json"
bsdcpio

Package

Name
bsdcpio
Purl
pkg:rpm/tuxcare/bsdcpio?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.5.3-6.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2025-1766232351.json"
bsdtar

Package

Name
bsdtar
Purl
pkg:rpm/tuxcare/bsdtar?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.5.3-6.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2025-1766232351.json"
libarchive

Package

Name
libarchive
Purl
pkg:rpm/tuxcare/libarchive?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.5.3-6.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2025-1766232351.json"
libarchive-devel

Package

Name
libarchive-devel
Purl
pkg:rpm/tuxcare/libarchive-devel?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.5.3-6.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2025-1766232351.json"