CLSA-2026-1787908647
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787908647.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1787908647
- Upstream
CVE (8)
- CVE-2021-23177
- CVE-2021-31566
- CVE-2022-36227
- CVE-2024-20696
- CVE-2025-25724
- CVE-2025-5914
- CVE-2026-4424
- CVE-2026-5121
- Published
- 2026-08-28T09:17:42Z
- Modified
- 2026-10-26T09:43:54Z
- Summary
- Fix of 8 CVEs
- Details
-
- SECURITY UPDATE: ACLs applied to a symbolic link modified the link
target instead
- debian/patches/CVE-2021-23177.patch: ACLs applied to a symbolic link modified the link target instead
- CVE-2021-23177
- SECURITY UPDATE: symbolic links followed when changing modes, times,
ACLs and flags while extracting an archive
- debian/patches/CVE-2021-31566.patch: symbolic links followed when changing modes, times, ACLs and flags while extracting an archive
- CVE-2021-31566
- SECURITY UPDATE: NULL pointer dereference when calloc() fails while
allocating a write filter
- debian/patches/CVE-2022-36227.patch: NULL pointer dereference when calloc() fails while allocating a write filter
- CVE-2022-36227
- SECURITY UPDATE: integer overflow in the RAR4 reader allowing an
oversized memcpy in copy_from_lzss_window()
- debian/patches/CVE-2024-20696.patch: integer overflow in the RAR4 reader allowing an oversized memcpy in copy_from_lzss_window()
- CVE-2024-20696
- SECURITY UPDATE: LZSS window size mismatch after a PPMd block in the
RAR4 reader allowing an out-of-bounds read
- debian/patches/CVE-2026-4424.patch: LZSS window size mismatch after a PPMd block in the RAR4 reader allowing an out-of-bounds read
- CVE-2026-4424
- SECURITY UPDATE: unvalidated zisofs block size exponent in the ISO9660
Rock Ridge ZF parser
- debian/patches/CVE-2026-5121.patch: unvalidated zisofs block size exponent in the ISO9660 Rock Ridge ZF parser
- CVE-2026-5121
- SECURITY UPDATE: double free in the RAR4 reader with over 4 billion
nodes
- debian/patches/CVE-2025-5914.patch: double free in the RAR4 reader with over 4 billion nodes
- CVE-2025-5914
- SECURITY UPDATE: unchecked strftime() return and localtime() NULL
dereference in the bsdtar verbose listing
- debian/patches/CVE-2025-25724.patch: check the strftime() result so a custom locale whose expansion exceeds the 100-byte buffer cannot leave stale content in it, and guard localtime() returning NULL; backports upstream c9bc934e and ecce4674
- CVE-2025-25724
- Guard the RAR seek cursor before the previous-block lookup
- debian/patches/rar-guard-seek-cursor.patch: reject a zero cursor in archive_read_format_rar_seek_data() before reading dbo[cursor - 1], which would otherwise underflow; backports upstream e548c994
- Check the ISO9660 ZF entry length before reading its data bytes
- debian/patches/iso9660-zf-length-check.patch: test data_length before data[0]/data[1] in parse_rockridge_ZF1(), so a zero-length ZF entry cannot be read past the SUSP region bound; backports upstream a9a73c0e
- SECURITY UPDATE: ACLs applied to a symbolic link modified the link
target instead
- References
-
- https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787908647.html
- https://nvd.nist.gov/vuln/detail/CVE-2021-23177
- https://nvd.nist.gov/vuln/detail/CVE-2021-31566
- https://nvd.nist.gov/vuln/detail/CVE-2022-36227
- https://nvd.nist.gov/vuln/detail/CVE-2024-20696
- https://nvd.nist.gov/vuln/detail/CVE-2025-25724
- https://nvd.nist.gov/vuln/detail/CVE-2025-5914
- https://nvd.nist.gov/vuln/detail/CVE-2026-4424
- https://nvd.nist.gov/vuln/detail/CVE-2026-5121
Affected packages
TuxCare:Ubuntu:18.04 / bsdcpio
Package
- Name
- bsdcpio
- Purl
- pkg:deb/tuxcare/bsdcpio?distro=ubuntu-18.04
TuxCare:Ubuntu:18.04 / bsdtar
Package
- Name
- bsdtar
- Purl
- pkg:deb/tuxcare/bsdtar?distro=ubuntu-18.04
TuxCare:Ubuntu:18.04 / libarchive-dev
Package
- Name
- libarchive-dev
- Purl
- pkg:deb/tuxcare/libarchive-dev?distro=ubuntu-18.04
TuxCare:Ubuntu:18.04 / libarchive-tools
Package
- Name
- libarchive-tools
- Purl
- pkg:deb/tuxcare/libarchive-tools?distro=ubuntu-18.04