A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libarchive-develUpgrade bsdtarUpgrade libarchive | Apr 20, 2026 | Apr 16, 2026 |
| Amazon Linux Ami 2 | — | Upgrade libarchiveUpgrade libarchive-debuginfoUpgrade libarchive-develUpgrade bsdtarUpgrade bsdcpio | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade libarchive | May 6, 2026 | May 6, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jun 2, 2026 |
| Oracle_linux | — | Upgrade libarchiveUpgrade libarchive-develUpgrade bsdtar | Apr 22, 2026 | Mar 30, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Mar 30, 2026 |
| Redhat_linux | — | Upgrade bsdcpio-debuginfoUpgrade bsdtarUpgrade libarchive-debugsourceUpgrade bsdcat-debuginfoUpgrade libarchive-develUpgrade bsdtar-debuginfoUpgrade bsdcpioUpgrade libarchiveUpgrade libarchive-debuginfo | Apr 17, 2026 | Mar 30, 2026 |
| Rocky_linux | — | Upgrade libarchive-debuginfoUpgrade bsdtar-debuginfoUpgrade libarchive-debugsourceUpgrade libarchiveUpgrade libarchive-develUpgrade bsdtar | Apr 20, 2026 | Apr 18, 2026 |
| Ubuntu | — | Upgrade libarchive13Upgrade libarchive13 (Ubuntu Pro)Upgrade libarchive13t64Upgrade libarchive-toolsUpgrade libarchive-devUpgrade libarchive-dev (Ubuntu Pro)Upgrade libarchive-tools (Ubuntu Pro)Upgrade bsdtar (Ubuntu Pro)Upgrade bsdcpio (Ubuntu Pro) | May 25, 2026 | May 21, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 30, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub