CLSA-els_os-almalinux9.2fips-2025:1766232351

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/osv-test/data/els_os/almalinux9.2fips/CLSA-els_os-almalinux9.2fips-2025:1766232351.json
JSON Data
https://api.test.osv.dev/v1/vulns/CLSA-els_os-almalinux9.2fips-2025:1766232351
Upstream
CVE (3)
Published
2026-02-09T17:32:46Z
Modified
2026-05-11T05:31:03Z
Summary
libarchive: Fix of 3 CVEs
Details
  • CVE-2025-5916: fix signed integer overflow in WARC format reader
  • CVE-2025-5917: fix buffer overflow in build_ustar_entry for PAX format
  • CVE-2025-5918: prevent skipping past EOF in archive file reading
References

Affected packages

TuxCare:AlmaLinux / bsdcat

Package

Name
bsdcat
Purl
pkg:tuxcare/bsdcat

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.3-6.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2fips/CLSA-els_os-almalinux9.2fips-2025:1766232351.json"

TuxCare:AlmaLinux / bsdcpio

Package

Name
bsdcpio
Purl
pkg:tuxcare/bsdcpio

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.3-6.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2fips/CLSA-els_os-almalinux9.2fips-2025:1766232351.json"

TuxCare:AlmaLinux / bsdtar

Package

Name
bsdtar
Purl
pkg:tuxcare/bsdtar

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.3-6.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2fips/CLSA-els_os-almalinux9.2fips-2025:1766232351.json"

TuxCare:AlmaLinux / libarchive

Package

Name
libarchive
Purl
pkg:tuxcare/libarchive

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.3-6.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2fips/CLSA-els_os-almalinux9.2fips-2025:1766232351.json"

TuxCare:AlmaLinux / libarchive-devel

Package

Name
libarchive-devel
Purl
pkg:tuxcare/libarchive-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.3-6.el9_6.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2fips/CLSA-els_os-almalinux9.2fips-2025:1766232351.json"