[ALSA-2026:52675] Moderate: libarchive security update
Type:
security
Severity:
moderate
Release date:
2026-08-10
Description:
The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack() (CVE-2026-14164) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 bsdtar-3.7.7-10.el10_2.aarch64.rpm 03134a893bb12ff67d35bcc244acfa7bede6422d2a488bfc6a86b01047472a7b
aarch64 libarchive-devel-3.7.7-10.el10_2.aarch64.rpm 90e87d9fff51859b1fbdf9fae6bbd0eaee4704a79426ba1be43177381a456f4c
aarch64 libarchive-3.7.7-10.el10_2.aarch64.rpm ba78d14a63e517b027b8dd7c911b4cfdfcaa742bd997d1479997df82d7e71574
ppc64le libarchive-3.7.7-10.el10_2.ppc64le.rpm 37405dcee8e922a807ae7a60469478449028836d87dbf71788058cf82fc7a73b
ppc64le libarchive-devel-3.7.7-10.el10_2.ppc64le.rpm 771bb5f0b1ba1e77051a8e45106079c0743962eada4f3d65215d51e059758801
ppc64le bsdtar-3.7.7-10.el10_2.ppc64le.rpm be9f1c80801cfc194ce55a59bd706e8a5b0d9771c7a3cb2a69b0ae4d30477965
s390x libarchive-devel-3.7.7-10.el10_2.s390x.rpm 356c96557e720316e51ed9d9dd9ff4aa863b06b9b9c1cab1cf22757e9986fab8
s390x libarchive-3.7.7-10.el10_2.s390x.rpm 74c8b0f2e70b4b35b175765b34beb4ee3826359cda0258aba8813df3c80f9841
s390x bsdtar-3.7.7-10.el10_2.s390x.rpm e371e9f97a60839d3745d64111a322518ca0970e13f24525c2a1983af10cfd1f
x86_64 libarchive-devel-3.7.7-10.el10_2.x86_64.rpm 50acdf83e37369e3d14fbeaadb57f84e6ea09c6decbd18f6206bcf22e4c26369
x86_64 bsdtar-3.7.7-10.el10_2.x86_64.rpm 80df6c70921e381402912f40c7f42f34bb53afb415093a5a96f15c779765c882
x86_64 libarchive-3.7.7-10.el10_2.x86_64.rpm d28374e2edb4daeaa0cdcf6ea4ddce15c27fe7b9b542f207e4ac5f5108e7ed08
x86_64_v2 libarchive-3.7.7-10.el10_2.x86_64_v2.rpm 087cd264b4545cabaed347bfe14e22370d67638caeb62ab563279f9973f245b2
x86_64_v2 libarchive-devel-3.7.7-10.el10_2.x86_64_v2.rpm 125d8c50877261464195cc9f281b0e257993d7134ed30fb9062803fd0fd8462a
x86_64_v2 bsdtar-3.7.7-10.el10_2.x86_64_v2.rpm 421ba2efeea4cd6068924e0fa3ede5c64df5e2a288b8146ad5f2c92079c421dd
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.