https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:31:01 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:9420 <p><strong>Affected:</strong> AlmaLinux:10: bsdtar, AlmaLinux:10: libarchive, AlmaLinux:10: libarchive-devel</p> <p>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.</p> <p>Security Fix(es):</p> <p>* libarchive: Buffer Overflow vulnerability in libarchive (CVE-2025-25724)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: bsdtar, AlmaLinux:10: libarchive, AlmaLinux:10: libarchive-devel</p> <p>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.</p> <p>Security Fix(es):</p> <p>* libarchive: Buffer Overflow vulnerability in libarchive (CVE-2025-25724)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:9420 https://cve.radiocsirt.org/vuln/bdu:2025-05210 bdu:2025-05210 https://cve.radiocsirt.org/vuln/bdu:2025-05210 https://cve.radiocsirt.org/vuln/bell-cve-2025-25724 <p><strong>Affected:</strong> Alpaquita:23: libarchive, Alpaquita:stream: libarchive</p> <p><strong>Affected:</strong> Alpaquita:23: libarchive, Alpaquita:stream: libarchive</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-25724 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0585 certfr-2025-avi-0585 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0585 https://cve.radiocsirt.org/vuln/euvd-2026-220442 EUVD-2026-220442 https://cve.radiocsirt.org/vuln/euvd-2026-220442 https://cve.radiocsirt.org/vuln/fkie_cve-2025-25724 <p>list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.</p> <p>list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-25724 https://cve.radiocsirt.org/vuln/ghsa-722w-734r-qg74 <p>list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.</p> <p>list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.</p> https://cve.radiocsirt.org/vuln/ghsa-722w-734r-qg74 https://cve.radiocsirt.org/vuln/msrc_cve-2025-25724 msrc_CVE-2025-25724 https://cve.radiocsirt.org/vuln/msrc_cve-2025-25724 https://cve.radiocsirt.org/vuln/oesa-2025-1309 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: libarchive</p> <p>is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security Fix(es):</p> <p>list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.(CVE-2025-25724)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: libarchive</p> <p>is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security Fix(es):</p> <p>list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.(CVE-2025-25724)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1309 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14882-1 <p>bsdtar-3.7.7-3.1 on GA media</p> <p>bsdtar-3.7.7-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14882-1 https://cve.radiocsirt.org/vuln/rhsa-2025:11487 <p>emacs: arbitrary code execution via Lisp macro expansion krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH glibc: Vector register overwrite bug in glibc linux-pam: Linux-pam directory Traversal libarchive: Buffer Overflow vulnerability in libarchive</p> <p>emacs: arbitrary code execution via Lisp macro expansion krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH glibc: Vector register overwrite bug in glibc linux-pam: Linux-pam directory Traversal libarchive: Buffer Overflow vulnerability in libarchive</p> https://cve.radiocsirt.org/vuln/rhsa-2025:11487 https://cve.radiocsirt.org/vuln/suse-su-2025:0985-1 <p>Security update for libarchive</p> <p>Security update for libarchive</p> https://cve.radiocsirt.org/vuln/suse-su-2025:0985-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-25724 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libarchive, Ubuntu:Pro:16.04:LTS: libarchive, Ubuntu:Pro:18.04:LTS: libarchive, Ubuntu:20.04:LTS: libarchive, Ubuntu:22.04:LTS: libarchive, Ubuntu:24.04:LTS: libarchive, Ubuntu:25.10: libarchive</p> <p>list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libarchive, Ubuntu:Pro:16.04:LTS: libarchive, Ubuntu:Pro:18.04:LTS: libarchive, Ubuntu:20.04:LTS: libarchive, Ubuntu:22.04:LTS: libarchive, Ubuntu:24.04:LTS: libarchive, Ubuntu:25.10: libarchive</p> <p>list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-25724 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0469 <p>Ein lokaler Angreifer kann eine Schwachstelle in libarchive ausnutzen, um einen Denial of Service Angriff und weitere nicht spezifizierte Angriffe durchzuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in libarchive ausnutzen, um einen Denial of Service Angriff und weitere nicht spezifizierte Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0469