Stay Secure with the Latest Linux Advisories

security advisorydenial of servicesecurity update

Mageia 2025-0102: libarchive Security Advisory Updates

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale. (CVE-2025-25724 . MGASA-2025-0102 - Updated libarchive packages fix security vulnerability Publication date: 17 Mar 2025 URL: https://advisories.mageia.org/MGASA-2025-0102.html Type: security Affected Mageia releases: 9 CVE: CVE-2025-25724 list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale. (CVE-2025-25724 References: - https://bugs.mageia.org/show_bug.cgi?id=34102 - - https://www.cve.org/CVERecord?id=CVE-2025-25724 SRPMS: - 9/core/libarchive-3.6.2-5.4.mga9 . libarchive vulnerability in Mageia can lead to denial of service via crafted TAR files. Important updates are necessary.. list_item_verbose, tar/util, libarchive, through, check, strftime, return, value. . Severity: Important. LinuxSecurity.com Team

Mar 17, 2025 •Important Mageia