https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:46:22.926412+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:9420 ALSA-2025:9420 — Moderate: libarchive security update 2026-10-04T01:46:23.267747+00:00

Affected: AlmaLinux:10: bsdtar, AlmaLinux:10: libarchive, AlmaLinux:10: libarchive-devel

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.

Security Fix(es):

* libarchive: Buffer Overflow vulnerability in libarchive (CVE-2025-25724)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-05210 bdu:2025-05210 2026-10-04T01:46:23.267819+00:00 bdu:2025-05210 https://cve.radiocsirt.org/vuln/bell-cve-2025-25724 BELL-CVE-2025-25724 2026-10-04T01:46:23.267837+00:00

Affected: Alpaquita:23: libarchive, Alpaquita:stream: libarchive

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0585 certfr-2025-avi-0585 — De multiples vulnérabilités ont été découvertes dans VMware Tanzu. Certaines d'entre elles permettent à un attaquant de… 2026-10-04T01:46:23.267856+00:00 certfr-2025-avi-0585 https://cve.radiocsirt.org/vuln/euvd-2026-220442 EUVD-2026-220442 2026-10-04T01:46:23.267872+00:00 EUVD-2026-220442 https://cve.radiocsirt.org/vuln/fkie_cve-2025-25724 fkie_cve-2025-25724 2026-10-04T01:46:23.267883+00:00

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

 https://cve.radiocsirt.org/vuln/ghsa-722w-734r-qg74 GHSA-722w-734r-qg74 2026-10-04T01:46:23.267904+00:00

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-25724 msrc_CVE-2025-25724 — list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to… 2026-10-04T01:46:23.267918+00:00 msrc_CVE-2025-25724 https://cve.radiocsirt.org/vuln/oesa-2025-1309 OESA-2025-1309 — libarchive security update 2026-10-04T01:46:23.267935+00:00

Affected: openEuler:22.03-LTS-SP4: libarchive

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security Fix(es):

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.(CVE-2025-25724)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14882-1 openSUSE-SU-2025:14882-1 — bsdtar-3.7.7-3.1 on GA media 2026-10-04T01:46:23.267958+00:00

bsdtar-3.7.7-3.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:11487 RHSA-2025:11487 — Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage 2026-10-04T01:46:23.267974+00:00

emacs: arbitrary code execution via Lisp macro expansion krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH glibc: Vector register overwrite bug in glibc linux-pam: Linux-pam directory Traversal libarchive: Buffer Overflow vulnerability in libarchive

 https://cve.radiocsirt.org/vuln/suse-su-2025:0985-1 SUSE-SU-2025:0985-1 — Security update for libarchive 2026-10-04T01:46:23.267998+00:00

Security update for libarchive

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-25724 UBUNTU-CVE-2025-25724 2026-10-04T01:46:23.268012+00:00

Affected: Ubuntu:Pro:14.04:LTS: libarchive, Ubuntu:Pro:16.04:LTS: libarchive, Ubuntu:Pro:18.04:LTS: libarchive, Ubuntu:20.04:LTS: libarchive, Ubuntu:22.04:LTS: libarchive, Ubuntu:24.04:LTS: libarchive, Ubuntu:25.10: libarchive

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0469 WID-SEC-W-2025-0469 — libarchive: Schwachstelle ermöglicht Denial of Service und weitere nicht spezifizierte Angriffe 2026-10-04T01:46:23.268039+00:00

Ein lokaler Angreifer kann eine Schwachstelle in libarchive ausnutzen, um einen Denial of Service Angriff und weitere nicht spezifizierte Angriffe durchzuführen.