SUSE-SU-2025:02718-1
- Source
- https://www.suse.com/support/update/announcement/2025/suse-su-202502718-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02718-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2025:02718-1
- Upstream
- Related
- Published
- 2025-08-06T13:55:09Z
- Modified
- 2026-03-11T07:30:05Z
- Summary
- Security update for libarchive
- Details
-
This update for libarchive fixes the following issues:
- CVE-2025-5914: Fixed double free due to an integer overflow in the archive_read_format_rar_seek_data() function (bsc#1244272)
- CVE-2025-5915: Fixed heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c (bsc#1244273)
- CVE-2025-5916: Fixed integer overflow while reading warc files at archive_read_support_format_warc.c (bsc#1244270)
- CVE-2025-5917: Fixed off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c (bsc#1244336)
- CVE-2025-5918: Fixed reading past EOF may be triggered for piped file streams (bsc#1244279)
- References
-
- https://www.suse.com/support/update/announcement/2025/suse-su-202502718-1/
- https://bugzilla.suse.com/1244270
- https://bugzilla.suse.com/1244272
- https://bugzilla.suse.com/1244273
- https://bugzilla.suse.com/1244279
- https://bugzilla.suse.com/1244336
- https://www.suse.com/security/cve/CVE-2025-5914
- https://www.suse.com/security/cve/CVE-2025-5915
- https://www.suse.com/security/cve/CVE-2025-5916
- https://www.suse.com/security/cve/CVE-2025-5917
- https://www.suse.com/security/cve/CVE-2025-5918
Affected packages
SUSE:Linux Enterprise Micro 5.3 / libarchive
Package
- Name
- libarchive
- Purl
- pkg:rpm/suse/libarchive&distro=SUSE%20Linux%20Enterprise%20Micro%205.3
SUSE:Linux Enterprise Micro 5.4 / libarchive
Package
- Name
- libarchive
- Purl
- pkg:rpm/suse/libarchive&distro=SUSE%20Linux%20Enterprise%20Micro%205.4