SUSE-SU-2026:3575-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20263575-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3575-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:3575-1
- Published
- 2026-08-11T08:38:06Z
- Modified
- 2026-08-12T10:45:05Z
- Summary
- Security update for libarchive
- Details
-
This update for libarchive fixes the following issues:
- creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable (bsc#1254340).
- file descriptor leak in the mtree parser cleanup path could lead to file descriptor exhaustion and denial of service (bsc#1261003).
- NULL pointer dereference in archive_acl_from_text_w() could lead to a segmentation fault (bsc#1260998).
- reading from an invalid index when buffer size is smaller than H_LEVEL_OFFSET can lead to an out-of-bounds buffer overrun (bsc#1254341).
- incorrect pointer handling for RAR5 files declaring over 8192 filters can lead to excessive resource usage and denial of service (bsc#1261002).
- References
Affected packages
SUSE:Linux Enterprise Micro 5.3 / libarchive
Package
- Name
- libarchive
- Purl
- pkg:rpm/suse/libarchive&distro=SUSE%20Linux%20Enterprise%20Micro%205.3
SUSE:Linux Enterprise Micro 5.4 / libarchive
Package
- Name
- libarchive
- Purl
- pkg:rpm/suse/libarchive&distro=SUSE%20Linux%20Enterprise%20Micro%205.4