[CLSA-2026:1780922803] libarchive: Fix of CVE-2026-4424
Type:
security
Severity:
Important
Release date:
2026-06-09 14:38:43 UTC
Description:
- CVE-2026-4424: fix RAR LZSS window size mismatch after PPMd block (heap OOB read)
CVEs fixed:
Updated packages:
  • bsdcpio-3.1.2-14.el7_7.tuxcare.els8.x86_64.rpm
    sha:1efd73754c4638925ea239728b0dd5e5c82333b3f073e2be7d98674f9189040c
  • bsdtar-3.1.2-14.el7_7.tuxcare.els8.x86_64.rpm
    sha:f25ed66c1bae2e76fb4197a8e61bc8eaf7b26f317fbd8f95418ad9d8f479625c
  • libarchive-3.1.2-14.el7_7.tuxcare.els8.i686.rpm
    sha:8f7077456da205e3f2dd89ce1845a07dbe6b7c9d7569daee21e3a7c0252e15ac
  • libarchive-3.1.2-14.el7_7.tuxcare.els8.x86_64.rpm
    sha:673b48780bfee3de8874c6a900177a2480cf140c94a47a49c2bfbb74fd26efa7
  • libarchive-devel-3.1.2-14.el7_7.tuxcare.els8.i686.rpm
    sha:1a5f170f92ecfad93afe8fb3516cd7e38352b5a5407aa75c80dc87c3290d16b5
  • libarchive-devel-3.1.2-14.el7_7.tuxcare.els8.x86_64.rpm
    sha:fe6a238cdf420ffce75c5c8cca7524c52432efc24f9ea688d35979ef3c95cb27
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.