libarchive-3.1.2-14.0.2.el7.AXS7

エラータID: AXSA:2025-10751:03

Release date: 
Monday, August 18, 2025 - 19:02
Subject: 
libarchive-3.1.2-14.0.2.el7.AXS7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

Libarchive is a programming library that can create and read several different
streaming archive formats, including most popular tar variants, several cpio
formats, and both BSD and GNU ar variants. It can also write shar archives and
read ISO9660 CDROM images and ZIP archives.

Security Fix(es):

* CVE-2025-25724: fix buffer overflow vulnerability in libarchive

CVE(s):
CVE-2025-25724
list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

Solution: 

Update packages.

CVEs: 
CVE-2025-25724
list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.
Additional Info: 

N/A

Download: 

Asianux Server 7 for x86_64
  1. libarchive-3.1.2-14.0.2.el7.AXS7.i686.rpm
    MD5: effb25bd58b446236574833dde90a748
    SHA-256: 106b239714338544ca8d3950c366b619934e35b0dc79b97c2718dd86b6a091a3
    Size: 335.45 kB
  2. libarchive-3.1.2-14.0.2.el7.AXS7.x86_64.rpm
    MD5: 3eab751b71b1f710ff28fc2459d6a347
    SHA-256: 7c08acf2237b32074c9d4695147a002ad491c787d42411cd007ce1b2c18ad655
    Size: 318.62 kB
  3. libarchive-devel-3.1.2-14.0.2.el7.AXS7.x86_64.rpm
    MD5: c50c5a033cce54fc90705e435c1c9e85
    SHA-256: 867ac9b0e727fcfd0931891e334cf21a9b2ef55620c65239bdea7a0aef06ae63
    Size: 114.31 kB