https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:22:52.826777+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4443 ALSA-2020:4443 — Moderate: libarchive security update 2026-10-03T05:22:53.209554+00:00

Affected: AlmaLinux:8: libarchive-devel

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.

Security Fix(es):

* libarchive: out-of-bounds read in archive_wstring_append_from_mbs in archive_string.c (CVE-2019-19221)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2019-04728 bdu:2019-04728 2026-10-03T05:22:53.209651+00:00 bdu:2019-04728 https://cve.radiocsirt.org/vuln/bell-cve-2019-19221 Withdrawn: BELL-CVE-2019-19221 — CVE-2019-19221 does not affect BellSoft software 2026-10-03T05:22:53.209679+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cnvd-2020-14714 cnvd-2020-14714 2026-10-03T05:22:53.209707+00:00 cnvd-2020-14714 https://cve.radiocsirt.org/vuln/euvd-2026-59184 EUVD-2026-59184 2026-10-03T05:22:53.209730+00:00 EUVD-2026-59184 https://cve.radiocsirt.org/vuln/fkie_cve-2019-19221 fkie_cve-2019-19221 2026-10-03T05:22:53.209759+00:00

In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.

 https://cve.radiocsirt.org/vuln/ghsa-m55v-6hqc-x3jh GHSA-m55v-6hqc-x3jh 2026-10-03T05:22:53.209800+00:00

In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.

 https://cve.radiocsirt.org/vuln/gsd-2019-19221 gsd-2019-19221 2026-10-03T05:22:53.209831+00:00 gsd-2019-19221 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10925-1 openSUSE-SU-2024:10925-1 — bsdtar-3.5.1-1.5 on GA media 2026-10-03T05:22:53.209855+00:00

bsdtar-3.5.1-1.5 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2021:3722-1 SUSE-SU-2021:3722-1 — Security update for libarchive 2026-10-03T05:22:53.209902+00:00

Security update for libarchive

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-19221 UBUNTU-CVE-2019-19221 2026-10-03T05:22:53.209935+00:00

Affected: Ubuntu:Pro:14.04:LTS: libarchive, Ubuntu:16.04:LTS: libarchive, Ubuntu:18.04:LTS: libarchive, Ubuntu:20.04:LTS: libarchive

In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2148 WID-SEC-W-2022-2148 — libarchive: Schwachstelle ermöglicht Denial of Service 2026-10-03T05:22:53.209985+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libarchive ausnutzen, um einen Denial of Service Angriff durchzuführen.