File _patchinfo of Package patchinfo.41018
<patchinfo incident="41018"> <issue tracker="cve" id="2025-5914"/> <issue tracker="cve" id="2025-5917"/> <issue tracker="cve" id="2025-5916"/> <issue tracker="cve" id="2025-5918"/> <issue tracker="bnc" id="1244279">VUL-0: CVE-2025-5918: libarchive: libarchive: Reading past EOF may be triggered for piped file streams</issue> <issue tracker="bnc" id="1244336">VUL-0: CVE-2025-5917: libarchive: libarchive: Off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c</issue> <issue tracker="bnc" id="1244272">VUL-0: CVE-2025-5914: libarchive: libarchive: double free due to an integer overflow in the archive_read_format_rar_seek_data() function</issue> <issue tracker="bnc" id="1244270">VUL-0: CVE-2025-5916: libarchive: libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c</issue> <packager>mgrossu</packager> <rating>important</rating> <category>security</category> <summary>Security update for libarchive</summary> <description>This update for libarchive fixes the following issues: - CVE-2025-5918: Fixed reading past EOF may be triggered for piped file streams (bsc#1244279). - CVE-2025-5917: Fixed off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c (bsc#1244336). - CVE-2025-5916: Fixed integer overflow while reading warc files at archive_read_support_format_warc.c (bsc#1244270). - CVE-2025-5914: Fixed double free due to an integer overflow in the archive_read_format_rar_seek_data() function (bsc#1244272). </description> </patchinfo>