MGASA-2025-0102

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2025-0102.html

Import Source

https://advisories.mageia.org/MGASA-2025-0102.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2025-0102

Related

CVE-2025-25724

Published

2025-03-17T16:33:29Z

Modified

2025-03-17T16:01:23Z

Summary

Updated libarchive packages fix security vulnerability

Details

listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale. (CVE-2025-25724

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:9 / libarchive

Package

Name: libarchive
Purl: pkg:rpm/mageia/libarchive?distro=mageia-9

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.6.2-5.4.mga9

Ecosystem specific

{
    "section": "core"
}