OESA-2026-3258

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3258
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-3258.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-3258
Upstream
  • CVE-2026-16517
Published
2026-08-07T02:42:20Z
Modified
2026-08-07T03:00:57.981619579Z
Severity
  • 2.9 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
libarchive security update
Details

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use .

Security Fix(es):

A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in archivewritesetformatzip.c, when ZIP encryption is enabled and the entry file size is close to INT64MAX, the addition of the encryption overhead to the entry size overflows int64_t, resulting in undefined behavior. This could lead to incorrect Zip64 extension decisions or potential memory corruption.(CVE-2026-16517)

Database specific 
{
    "severity": "Low"
}
References

Affected packages

openEuler:20.03-LTS-SP4
libarchive

Package

Name
libarchive
Purl
pkg:rpm/openEuler/libarchive&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.4.3-16.oe2003sp4

Ecosystem specific 

{
    "noarch": [
        "libarchive-help-3.4.3-16.oe2003sp4.noarch.rpm"
    ],
    "src": [
        "libarchive-3.4.3-16.oe2003sp4.src.rpm"
    ],
    "x86_64": [
        "libarchive-3.4.3-16.oe2003sp4.x86_64.rpm",
        "libarchive-debuginfo-3.4.3-16.oe2003sp4.x86_64.rpm",
        "libarchive-debugsource-3.4.3-16.oe2003sp4.x86_64.rpm",
        "libarchive-devel-3.4.3-16.oe2003sp4.x86_64.rpm"
    ],
    "aarch64": [
        "libarchive-3.4.3-16.oe2003sp4.aarch64.rpm",
        "libarchive-debuginfo-3.4.3-16.oe2003sp4.aarch64.rpm",
        "libarchive-debugsource-3.4.3-16.oe2003sp4.aarch64.rpm",
        "libarchive-devel-3.4.3-16.oe2003sp4.aarch64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3258.json"
openEuler:22.03-LTS-SP4
libarchive

Package

Name
libarchive
Purl
pkg:rpm/openEuler/libarchive&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.5.2-15.oe2203sp4

Ecosystem specific 

{
    "noarch": [
        "libarchive-help-3.5.2-15.oe2203sp4.noarch.rpm"
    ],
    "src": [
        "libarchive-3.5.2-15.oe2203sp4.src.rpm"
    ],
    "x86_64": [
        "bsdcat-3.5.2-15.oe2203sp4.x86_64.rpm",
        "bsdcpio-3.5.2-15.oe2203sp4.x86_64.rpm",
        "bsdtar-3.5.2-15.oe2203sp4.x86_64.rpm",
        "libarchive-3.5.2-15.oe2203sp4.x86_64.rpm",
        "libarchive-debuginfo-3.5.2-15.oe2203sp4.x86_64.rpm",
        "libarchive-debugsource-3.5.2-15.oe2203sp4.x86_64.rpm",
        "libarchive-devel-3.5.2-15.oe2203sp4.x86_64.rpm"
    ],
    "aarch64": [
        "bsdcat-3.5.2-15.oe2203sp4.aarch64.rpm",
        "bsdcpio-3.5.2-15.oe2203sp4.aarch64.rpm",
        "bsdtar-3.5.2-15.oe2203sp4.aarch64.rpm",
        "libarchive-3.5.2-15.oe2203sp4.aarch64.rpm",
        "libarchive-debuginfo-3.5.2-15.oe2203sp4.aarch64.rpm",
        "libarchive-debugsource-3.5.2-15.oe2203sp4.aarch64.rpm",
        "libarchive-devel-3.5.2-15.oe2203sp4.aarch64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3258.json"
openEuler:24.03-LTS-SP1
libarchive

Package

Name
libarchive
Purl
pkg:rpm/openEuler/libarchive&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.7.1-13.oe2403sp1

Ecosystem specific 

{
    "noarch": [
        "libarchive-help-3.7.1-13.oe2403sp1.noarch.rpm"
    ],
    "src": [
        "libarchive-3.7.1-13.oe2403sp1.src.rpm"
    ],
    "x86_64": [
        "bsdcat-3.7.1-13.oe2403sp1.x86_64.rpm",
        "bsdcpio-3.7.1-13.oe2403sp1.x86_64.rpm",
        "bsdtar-3.7.1-13.oe2403sp1.x86_64.rpm",
        "bsdunzip-3.7.1-13.oe2403sp1.x86_64.rpm",
        "libarchive-3.7.1-13.oe2403sp1.x86_64.rpm",
        "libarchive-debuginfo-3.7.1-13.oe2403sp1.x86_64.rpm",
        "libarchive-debugsource-3.7.1-13.oe2403sp1.x86_64.rpm",
        "libarchive-devel-3.7.1-13.oe2403sp1.x86_64.rpm"
    ],
    "aarch64": [
        "bsdcat-3.7.1-13.oe2403sp1.aarch64.rpm",
        "bsdcpio-3.7.1-13.oe2403sp1.aarch64.rpm",
        "bsdtar-3.7.1-13.oe2403sp1.aarch64.rpm",
        "bsdunzip-3.7.1-13.oe2403sp1.aarch64.rpm",
        "libarchive-3.7.1-13.oe2403sp1.aarch64.rpm",
        "libarchive-debuginfo-3.7.1-13.oe2403sp1.aarch64.rpm",
        "libarchive-debugsource-3.7.1-13.oe2403sp1.aarch64.rpm",
        "libarchive-devel-3.7.1-13.oe2403sp1.aarch64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3258.json"
openEuler:24.03-LTS-SP3
libarchive

Package

Name
libarchive
Purl
pkg:rpm/openEuler/libarchive&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.7.1-13.oe2403sp3

Ecosystem specific 

{
    "noarch": [
        "libarchive-help-3.7.1-13.oe2403sp3.noarch.rpm"
    ],
    "src": [
        "libarchive-3.7.1-13.oe2403sp3.src.rpm"
    ],
    "x86_64": [
        "bsdcat-3.7.1-13.oe2403sp3.x86_64.rpm",
        "bsdcpio-3.7.1-13.oe2403sp3.x86_64.rpm",
        "bsdtar-3.7.1-13.oe2403sp3.x86_64.rpm",
        "bsdunzip-3.7.1-13.oe2403sp3.x86_64.rpm",
        "libarchive-3.7.1-13.oe2403sp3.x86_64.rpm",
        "libarchive-debuginfo-3.7.1-13.oe2403sp3.x86_64.rpm",
        "libarchive-debugsource-3.7.1-13.oe2403sp3.x86_64.rpm",
        "libarchive-devel-3.7.1-13.oe2403sp3.x86_64.rpm"
    ],
    "aarch64": [
        "bsdcat-3.7.1-13.oe2403sp3.aarch64.rpm",
        "bsdcpio-3.7.1-13.oe2403sp3.aarch64.rpm",
        "bsdtar-3.7.1-13.oe2403sp3.aarch64.rpm",
        "bsdunzip-3.7.1-13.oe2403sp3.aarch64.rpm",
        "libarchive-3.7.1-13.oe2403sp3.aarch64.rpm",
        "libarchive-debuginfo-3.7.1-13.oe2403sp3.aarch64.rpm",
        "libarchive-debugsource-3.7.1-13.oe2403sp3.aarch64.rpm",
        "libarchive-devel-3.7.1-13.oe2403sp3.aarch64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3258.json"
openEuler:24.03-LTS-SP4
libarchive

Package

Name
libarchive
Purl
pkg:rpm/openEuler/libarchive&distro=openEuler-24.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.7.1-13.oe2403sp4

Ecosystem specific 

{
    "noarch": [
        "libarchive-help-3.7.1-13.oe2403sp4.noarch.rpm"
    ],
    "src": [
        "libarchive-3.7.1-13.oe2403sp4.src.rpm"
    ],
    "x86_64": [
        "bsdcat-3.7.1-13.oe2403sp4.x86_64.rpm",
        "bsdcpio-3.7.1-13.oe2403sp4.x86_64.rpm",
        "bsdtar-3.7.1-13.oe2403sp4.x86_64.rpm",
        "bsdunzip-3.7.1-13.oe2403sp4.x86_64.rpm",
        "libarchive-3.7.1-13.oe2403sp4.x86_64.rpm",
        "libarchive-debuginfo-3.7.1-13.oe2403sp4.x86_64.rpm",
        "libarchive-debugsource-3.7.1-13.oe2403sp4.x86_64.rpm",
        "libarchive-devel-3.7.1-13.oe2403sp4.x86_64.rpm"
    ],
    "aarch64": [
        "bsdcat-3.7.1-13.oe2403sp4.aarch64.rpm",
        "bsdcpio-3.7.1-13.oe2403sp4.aarch64.rpm",
        "bsdtar-3.7.1-13.oe2403sp4.aarch64.rpm",
        "bsdunzip-3.7.1-13.oe2403sp4.aarch64.rpm",
        "libarchive-3.7.1-13.oe2403sp4.aarch64.rpm",
        "libarchive-debuginfo-3.7.1-13.oe2403sp4.aarch64.rpm",
        "libarchive-debugsource-3.7.1-13.oe2403sp4.aarch64.rpm",
        "libarchive-devel-3.7.1-13.oe2403sp4.aarch64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3258.json"