RHSA-2026:69553
Vulnerability from csaf_opensuse - Published: 2026-09-21 23:38 - Updated: 2026-09-22 03:39Summary
Red Hat Security Advisory: libarchive security update
Severity
Low
Notes
Topic: An update for libarchive is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.
Security Fix(es):
* libarchive: heap overflow OOB read while parsing a tar archive contains a PAX extended header (CVE-2026-15028)
* libarchive: libarchive: Signed Integer Overflow in archive_write_zip_header (CVE-2026-16517)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in libarchive. This vulnerability allows a remote attacker to trigger a heap overflow by providing a specially crafted tar archive. The issue occurs during the parsing of a PAX extended header containing a malformed SUN.holesdata sparse-file attribute. Successful exploitation could lead to a denial of service, making the system unavailable, or potentially allow for arbitrary code execution, giving the attacker control over the affected system.
CWE-805 - Buffer Access with Incorrect Length ValueAffected products
Fixed
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archive_write_zip_header function in archive_write_set_format_zip.c, when ZIP encryption is enabled and the entry file size is close to INT64_MAX, the addition of the encryption overhead to the entry size overflows int64_t, resulting in undefined behavior. This could lead to incorrect Zip64 extension decisions or potential memory corruption.
CWE-190 - Integer Overflow or WraparoundAffected products
Fixed
61 products, the same list as for
CVE-2026-15028
Threats
Impact
Low
References
15 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for libarchive is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.\n\nSecurity Fix(es):\n\n* libarchive: heap overflow OOB read while parsing a tar archive contains a PAX extended header (CVE-2026-15028)\n\n* libarchive: libarchive: Signed Integer Overflow in archive_write_zip_header (CVE-2026-16517)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:69553",
"url": "https://access.redhat.com/errata/RHSA-2026:69553"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#low",
"url": "https://access.redhat.com/security/updates/classification/#low"
},
{
"category": "external",
"summary": "2497970",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497970"
},
{
"category": "external",
"summary": "2505492",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2505492"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69553.json"
}
],
"title": "Red Hat Security Advisory: libarchive security update",
"tracking": {
"current_release_date": "2026-09-22T03:39:58+00:00",
"generator": {
"date": "2026-09-22T03:39:58+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:69553",
"initial_release_date": "2026-09-21T23:38:41+00:00",
"revision_history": [
{
"date": "2026-09-21T23:38:41+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-21T23:38:41+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-22T03:39:58+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-0:3.7.7-11.el10_2.s390x",
"product": {
"name": "bsdtar-0:3.7.7-11.el10_2.s390x",
"product_id": "bsdtar-0:3.7.7-11.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdtar@3.7.7-11.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libarchive-devel-0:3.7.7-11.el10_2.s390x",
"product": {
"name": "libarchive-devel-0:3.7.7-11.el10_2.s390x",
"product_id": "libarchive-devel-0:3.7.7-11.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive-devel@3.7.7-11.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"product": {
"name": "libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"product_id": "libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive-debugsource@3.7.7-11.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"product": {
"name": "bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"product_id": "bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.7.7-11.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"product": {
"name": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"product_id": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.7.7-11.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"product": {
"name": "bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"product_id": "bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.7.7-11.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"product": {
"name": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"product_id": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdunzip-debuginfo@3.7.7-11.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"product": {
"name": "libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"product_id": "libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive-debuginfo@3.7.7-11.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libarchive-0:3.7.7-11.el10_2.s390x",
"product": {
"name": "libarchive-0:3.7.7-11.el10_2.s390x",
"product_id": "libarchive-0:3.7.7-11.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive@3.7.7-11.el10_2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-0:3.7.7-11.el10_2.aarch64",
"product": {
"name": "bsdtar-0:3.7.7-11.el10_2.aarch64",
"product_id": "bsdtar-0:3.7.7-11.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdtar@3.7.7-11.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libarchive-devel-0:3.7.7-11.el10_2.aarch64",
"product": {
"name": "libarchive-devel-0:3.7.7-11.el10_2.aarch64",
"product_id": "libarchive-devel-0:3.7.7-11.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive-devel@3.7.7-11.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"product": {
"name": "libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"product_id": "libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive-debugsource@3.7.7-11.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"product": {
"name": "bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"product_id": "bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.7.7-11.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"product": {
"name": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"product_id": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.7.7-11.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"product": {
"name": "bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"product_id": "bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.7.7-11.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"product": {
"name": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"product_id": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdunzip-debuginfo@3.7.7-11.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"product": {
"name": "libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"product_id": "libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive-debuginfo@3.7.7-11.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libarchive-0:3.7.7-11.el10_2.aarch64",
"product": {
"name": "libarchive-0:3.7.7-11.el10_2.aarch64",
"product_id": "libarchive-0:3.7.7-11.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive@3.7.7-11.el10_2?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-0:3.7.7-11.el10_2.ppc64le",
"product": {
"name": "bsdtar-0:3.7.7-11.el10_2.ppc64le",
"product_id": "bsdtar-0:3.7.7-11.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdtar@3.7.7-11.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libarchive-devel-0:3.7.7-11.el10_2.ppc64le",
"product": {
"name": "libarchive-devel-0:3.7.7-11.el10_2.ppc64le",
"product_id": "libarchive-devel-0:3.7.7-11.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive-devel@3.7.7-11.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"product": {
"name": "libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"product_id": "libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive-debugsource@3.7.7-11.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"product": {
"name": "bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"product_id": "bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.7.7-11.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"product": {
"name": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"product_id": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.7.7-11.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"product": {
"name": "bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"product_id": "bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.7.7-11.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"product": {
"name": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"product_id": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdunzip-debuginfo@3.7.7-11.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"product": {
"name": "libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"product_id": "libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive-debuginfo@3.7.7-11.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libarchive-0:3.7.7-11.el10_2.ppc64le",
"product": {
"name": "libarchive-0:3.7.7-11.el10_2.ppc64le",
"product_id": "libarchive-0:3.7.7-11.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive@3.7.7-11.el10_2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-0:3.7.7-11.el10_2.x86_64",
"product": {
"name": "bsdtar-0:3.7.7-11.el10_2.x86_64",
"product_id": "bsdtar-0:3.7.7-11.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdtar@3.7.7-11.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libarchive-devel-0:3.7.7-11.el10_2.x86_64",
"product": {
"name": "libarchive-devel-0:3.7.7-11.el10_2.x86_64",
"product_id": "libarchive-devel-0:3.7.7-11.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive-devel@3.7.7-11.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libarchive-debugsource-0:3.7.7-11.el10_2.x86_64",
"product": {
"name": "libarchive-debugsource-0:3.7.7-11.el10_2.x86_64",
"product_id": "libarchive-debugsource-0:3.7.7-11.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive-debugsource@3.7.7-11.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"product": {
"name": "bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"product_id": "bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdcat-debuginfo@3.7.7-11.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"product": {
"name": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"product_id": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdcpio-debuginfo@3.7.7-11.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"product": {
"name": "bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"product_id": "bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdtar-debuginfo@3.7.7-11.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"product": {
"name": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"product_id": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bsdunzip-debuginfo@3.7.7-11.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"product": {
"name": "libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"product_id": "libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive-debuginfo@3.7.7-11.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libarchive-0:3.7.7-11.el10_2.x86_64",
"product": {
"name": "libarchive-0:3.7.7-11.el10_2.x86_64",
"product_id": "libarchive-0:3.7.7-11.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive@3.7.7-11.el10_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "libarchive-0:3.7.7-11.el10_2.src",
"product": {
"name": "libarchive-0:3.7.7-11.el10_2.src",
"product_id": "libarchive-0:3.7.7-11.el10_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libarchive@3.7.7-11.el10_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64"
},
"product_reference": "bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le"
},
"product_reference": "bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x"
},
"product_reference": "bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64"
},
"product_reference": "bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64"
},
"product_reference": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le"
},
"product_reference": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x"
},
"product_reference": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64"
},
"product_reference": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-0:3.7.7-11.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.aarch64"
},
"product_reference": "bsdtar-0:3.7.7-11.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-0:3.7.7-11.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.ppc64le"
},
"product_reference": "bsdtar-0:3.7.7-11.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-0:3.7.7-11.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.s390x"
},
"product_reference": "bsdtar-0:3.7.7-11.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-0:3.7.7-11.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.x86_64"
},
"product_reference": "bsdtar-0:3.7.7-11.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64"
},
"product_reference": "bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le"
},
"product_reference": "bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x"
},
"product_reference": "bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64"
},
"product_reference": "bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64"
},
"product_reference": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le"
},
"product_reference": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x"
},
"product_reference": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64"
},
"product_reference": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64"
},
"product_reference": "libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le"
},
"product_reference": "libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debuginfo-0:3.7.7-11.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.s390x"
},
"product_reference": "libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64"
},
"product_reference": "libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debugsource-0:3.7.7-11.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.aarch64"
},
"product_reference": "libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le"
},
"product_reference": "libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debugsource-0:3.7.7-11.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.s390x"
},
"product_reference": "libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debugsource-0:3.7.7-11.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.x86_64"
},
"product_reference": "libarchive-debugsource-0:3.7.7-11.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-0:3.7.7-11.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.aarch64"
},
"product_reference": "libarchive-devel-0:3.7.7-11.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-0:3.7.7-11.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.ppc64le"
},
"product_reference": "libarchive-devel-0:3.7.7-11.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-0:3.7.7-11.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.s390x"
},
"product_reference": "libarchive-devel-0:3.7.7-11.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-0:3.7.7-11.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.x86_64"
},
"product_reference": "libarchive-devel-0:3.7.7-11.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64"
},
"product_reference": "bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le"
},
"product_reference": "bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x"
},
"product_reference": "bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64"
},
"product_reference": "bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64"
},
"product_reference": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le"
},
"product_reference": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x"
},
"product_reference": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64"
},
"product_reference": "bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64"
},
"product_reference": "bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le"
},
"product_reference": "bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x"
},
"product_reference": "bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64"
},
"product_reference": "bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64"
},
"product_reference": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le"
},
"product_reference": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x"
},
"product_reference": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64"
},
"product_reference": "bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-0:3.7.7-11.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.aarch64"
},
"product_reference": "libarchive-0:3.7.7-11.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-0:3.7.7-11.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.ppc64le"
},
"product_reference": "libarchive-0:3.7.7-11.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-0:3.7.7-11.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.s390x"
},
"product_reference": "libarchive-0:3.7.7-11.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-0:3.7.7-11.el10_2.src as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.src"
},
"product_reference": "libarchive-0:3.7.7-11.el10_2.src",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-0:3.7.7-11.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.x86_64"
},
"product_reference": "libarchive-0:3.7.7-11.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64"
},
"product_reference": "libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le"
},
"product_reference": "libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debuginfo-0:3.7.7-11.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.s390x"
},
"product_reference": "libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64"
},
"product_reference": "libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debugsource-0:3.7.7-11.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.aarch64"
},
"product_reference": "libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le"
},
"product_reference": "libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debugsource-0:3.7.7-11.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.s390x"
},
"product_reference": "libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-debugsource-0:3.7.7-11.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.x86_64"
},
"product_reference": "libarchive-debugsource-0:3.7.7-11.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-15028",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"discovery_date": "2026-07-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497970"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libarchive. This vulnerability allows a remote attacker to trigger a heap overflow by providing a specially crafted tar archive. The issue occurs during the parsing of a PAX extended header containing a malformed SUN.holesdata sparse-file attribute. Successful exploitation could lead to a denial of service, making the system unavailable, or potentially allow for arbitrary code execution, giving the attacker control over the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: heap overflow OOB read while parsing a tar archive contains a PAX extended header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Conditions for Exploitation: Successful exploitation requires user interaction or a specific application workflow. An attacker cannot trigger this flaw entirely on their own remotely; they must supply a specially crafted tar archive and rely on a user or an automated system (such as an antivirus scanner or file extraction tool) to actively parse it using the libarchive library.\n\nImpact Limitations: Although the heap overflow has the potential to allow for arbitrary code execution, achieving this reliably is typically complex and highly dependent on the memory layout and protections of the specific application utilizing the library. In most common scenarios, the malformed archive will simply cause the parsing application to crash, resulting in a localized Denial of Service (DoS) rather than a full system compromise.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.src",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15028"
},
{
"category": "external",
"summary": "RHBZ#2497970",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497970"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15028",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15028"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15028",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15028"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/issues/3251",
"url": "https://github.com/libarchive/libarchive/issues/3251"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/3253",
"url": "https://github.com/libarchive/libarchive/pull/3253"
}
],
"release_date": "2026-07-08T10:10:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T23:38:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.src",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69553"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing untrusted or unverified tar archives. Users should exercise caution when handling archives from unknown sources or those with unexpected content, as processing a specially crafted archive could trigger the vulnerability.",
"product_ids": [
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.src",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.9,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.src",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libarchive: heap overflow OOB read while parsing a tar archive contains a PAX extended header"
},
{
"acknowledgments": [
{
"names": [
"shaohan.X"
]
}
],
"cve": "CVE-2026-16517",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-07-04T04:42:50+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2505492"
}
],
"notes": [
{
"category": "description",
"text": "A signed integer overflow vulnerability was found in libarchive\u0027s ZIP writer. In the archive_write_zip_header function in archive_write_set_format_zip.c, when ZIP encryption is enabled and the entry file size is close to INT64_MAX, the addition of the encryption overhead to the entry size overflows int64_t, resulting in undefined behavior. This could lead to incorrect Zip64 extension decisions or potential memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: libarchive: Signed Integer Overflow in archive_write_zip_header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates this issue as Low severity. The vulnerability is in the ZIP write path only and requires both ZIP encryption to be enabled and a file size near INT64_MAX, making real-world exploitation highly unlikely. The resulting undefined behavior could theoretically cause incorrect Zip64 extension decisions or a crash, but the conditions are too contrived for practical exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.src",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-16517"
},
{
"category": "external",
"summary": "RHBZ#2505492",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2505492"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-16517",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16517"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16517",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16517"
}
],
"release_date": "2026-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T23:38:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.src",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69553"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 2.9,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdtar-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.x86_64",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.aarch64",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.ppc64le",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.s390x",
"AppStream-10.2.Z:libarchive-devel-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdcat-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdcpio-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdtar-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:bsdunzip-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.src",
"BaseOS-10.2.Z:libarchive-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-debuginfo-0:3.7.7-11.el10_2.x86_64",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.aarch64",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.ppc64le",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.s390x",
"BaseOS-10.2.Z:libarchive-debugsource-0:3.7.7-11.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "libarchive: libarchive: Signed Integer Overflow in archive_write_zip_header"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…