Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:0985-1

Опубликовано: 21 мар. 2025
Источник: suse-cvrf

Описание

Security update for libarchive

This update for libarchive fixes the following issues:

  • CVE-2025-1632: Fixed null pointer dereference in bsdunzip.c (bsc#1237606)
  • CVE-2025-25724: Fixed buffer overflow vulnerability in function list_item_verbose() in tar/util.c (bsc#1238610)

Список пакетов

Container bci/spack:0.23
libarchive13-3.7.2-150600.3.12.1
Container bci/spack:latest
libarchive13-3.7.2-150600.3.12.1
Container containers/lmcache-vllm-openai:0
libarchive13-3.7.2-150600.3.12.1
Container containers/pytorch:2-nvidia
libarchive13-3.7.2-150600.3.12.1
Container containers/vllm-openai:0
libarchive13-3.7.2-150600.3.12.1
Container suse/manager/5.0/x86_64/server:latest
libarchive13-3.7.2-150600.3.12.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest
libarchive13-3.7.2-150600.3.12.1
Container suse/samba-client:latest
libarchive13-3.7.2-150600.3.12.1
Container suse/samba-server:latest
libarchive13-3.7.2-150600.3.12.1
Container suse/samba-toolbox:latest
libarchive13-3.7.2-150600.3.12.1
Image SLES15-SP6-SAP
libarchive13-3.7.2-150600.3.12.1
Image SLES15-SP6-SAP-Azure
libarchive13-3.7.2-150600.3.12.1
Image SLES15-SP6-SAP-EC2
libarchive13-3.7.2-150600.3.12.1
Image SLES15-SP6-SAP-GCE
libarchive13-3.7.2-150600.3.12.1
Image SLES15-SP6-SAPCAL
libarchive13-3.7.2-150600.3.12.1
Image SLES15-SP6-SAPCAL-Azure
libarchive13-3.7.2-150600.3.12.1
Image SLES15-SP6-SAPCAL-EC2
libarchive13-3.7.2-150600.3.12.1
Image SLES15-SP6-SAPCAL-GCE
libarchive13-3.7.2-150600.3.12.1
Image SLES15-SP7-SAPCAL-Azure
libarchive13-3.7.2-150600.3.12.1
Image SLES15-SP7-SAPCAL-EC2
libarchive13-3.7.2-150600.3.12.1
Image SLES15-SP7-SAPCAL-GCE
libarchive13-3.7.2-150600.3.12.1
Image ai_15_6
libarchive13-3.7.2-150600.3.12.1
Image server-image
libarchive13-3.7.2-150600.3.12.1
Image server-image-sles15sp7
libarchive13-3.7.2-150600.3.12.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
libarchive-devel-3.7.2-150600.3.12.1
libarchive13-3.7.2-150600.3.12.1
SUSE Linux Enterprise Module for Development Tools 15 SP6
bsdtar-3.7.2-150600.3.12.1
openSUSE Leap 15.6
bsdtar-3.7.2-150600.3.12.1
libarchive-devel-3.7.2-150600.3.12.1
libarchive13-3.7.2-150600.3.12.1
libarchive13-32bit-3.7.2-150600.3.12.1

Ссылки

Описание

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Затронутые продукты
Container bci/spack:0.23:libarchive13-3.7.2-150600.3.12.1
Container bci/spack:latest:libarchive13-3.7.2-150600.3.12.1
Container containers/lmcache-vllm-openai:0:libarchive13-3.7.2-150600.3.12.1
Container containers/pytorch:2-nvidia:libarchive13-3.7.2-150600.3.12.1
Ссылки

Описание

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

Затронутые продукты
Container bci/spack:0.23:libarchive13-3.7.2-150600.3.12.1
Container bci/spack:latest:libarchive13-3.7.2-150600.3.12.1
Container containers/lmcache-vllm-openai:0:libarchive13-3.7.2-150600.3.12.1
Container containers/pytorch:2-nvidia:libarchive13-3.7.2-150600.3.12.1
Ссылки