CLSA-2026-1792818643

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792818643.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1792818643
Upstream
CVE (3)
Published
2026-10-24T05:10:55Z
Modified
2026-10-26T09:31:53Z
Summary
libarchive: Fix of 2 CVEs
Details
  • CVE-2021-23177: fix extraction of ACLs to the symlink target instead of the link
  • CVE-2021-31566: do not follow symlinks when fixing up permissions and file flags
  • CVE-2026-5121: validate pz_log2_bs in the iso9660 zisofs reader
References

Affected packages

TuxCare:OracleLinux:6 / libarchive

Package

Name
libarchive
Purl
pkg:rpm/tuxcare/libarchive?distro=oraclelinux-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.3-7.el6_8.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792818643.json"

TuxCare:OracleLinux:6 / libarchive-devel

Package

Name
libarchive-devel
Purl
pkg:rpm/tuxcare/libarchive-devel?distro=oraclelinux-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.3-7.el6_8.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792818643.json"