CLSA-2026-1792167585
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792167585.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1792167585
- Upstream
CVE (3)
- CVE-2025-5914
- CVE-2026-4424
- CVE-2026-5121
- Published
- 2026-10-16T16:20:02Z
- Modified
- 2026-10-26T09:31:59Z
- Summary
- libarchive: Fix of 7 CVEs
- Details
-
- Rebase onto Oracle 3.1.2-14.0.3.el7_9: take Oracle's CVE-2025-5914, CVE-2026-4424 and CVE-2026-5121 patches in place of ours; keep only the extra CVE-2026-4424 copy_from_lzss_window() bounds check
- Build el7 targets with the .el7_9 dist
- References
-
- https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792167585.html
- https://nvd.nist.gov/vuln/detail/CVE-2021-23177
- https://nvd.nist.gov/vuln/detail/CVE-2021-31566
- https://nvd.nist.gov/vuln/detail/CVE-2022-36227
- https://nvd.nist.gov/vuln/detail/CVE-2025-25724
- https://nvd.nist.gov/vuln/detail/CVE-2025-5914
- https://nvd.nist.gov/vuln/detail/CVE-2026-4424
- https://nvd.nist.gov/vuln/detail/CVE-2026-5121
Affected packages
TuxCare:RHEL:7 / bsdcpio
Package
- Name
- bsdcpio
- Purl
- pkg:rpm/tuxcare/bsdcpio?distro=rhel-7
TuxCare:RHEL:7 / bsdtar
Package
- Name
- bsdtar
- Purl
- pkg:rpm/tuxcare/bsdtar?distro=rhel-7
TuxCare:RHEL:7 / libarchive
Package
- Name
- libarchive
- Purl
- pkg:rpm/tuxcare/libarchive?distro=rhel-7