Critical Security Update for libarchive and Related Packages: CVE-2025-14130
Summary
RHSA-2025:14130: Red Hat Security Advisory: libarchive security update. Affects bsdcat-debuginfo versions < 0:3.5.3-6.el9_6. Fixed in 0:3.5.3-6.el9_6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libarchive is a widely used library for reading and writing various archive formats, including tar, cpio, and zip. It provides a robust interface for handling compressed files and is integral to many applications in the Red Hat Enterprise Linux ecosystem. The library's functionality is critical for developers and system administrators who rely on efficient file management and archiving solutions. However, recent vulnerabilities have been identified that could potentially expose systems to security risks.
Vulnerability Detail
The vulnerability identified in libarchive and its related packages stems from improper handling of certain archive formats, which could allow an attacker to execute arbitrary code or cause a denial of service. This issue arises from flaws in the parsing logic of the library, making it susceptible to crafted input that could exploit these weaknesses. The ramifications of this vulnerability are severe, as it could lead to unauthorized access, data corruption, or system crashes, impacting the integrity and availability of affected systems.
How To Fix
Minimum fixed version
0:3.5.3-6.el9_6
This is the first release that contains the fix.
sudo dnf update bsdcat-debuginfoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using the affected functionalities of libarchive until the packages are updated. It is advisable to limit the processing of untrusted archive files to mitigate the risk of exploitation.
Conclusion
In summary, the libarchive vulnerability poses significant risks to systems utilizing this library. It is crucial to update to the patched version to mitigate these risks. Users are encouraged to utilize tools like Vulert for ongoing monitoring of vulnerabilities in their applications.
See every vulnerability recorded for bsdcat-debuginfo →
FAQ
The CVSS score of this vulnerability is 7.3, indicating a high severity level.
You can use Vulert, which monitors open-source vulnerabilities in your software. By simply uploading your manifest file, such as package-lock.json, you can check for vulnerabilities without any installation.
The potential impacts include unauthorized code execution, data corruption, and denial of service, which can severely affect system integrity and availability.
Yes, you need to update to version 0:3.5.3-6.el9_6 to ensure that the vulnerability is patched.
Yes, you can use the Vulert playground at Vulert Scanner to check for vulnerabilities without requiring a signup.
Related vulnerabilities
Recent vulnerabilities recorded for bsdcat-debuginfo.
