Red Hat Product Errata RHSA-2026:24383 - Security Advisory Issued: 2026-06-08 Updated: 2026-06-08 RHSA-2026:24383 - Security Advisory Overview Updated Packages Synopsis Moderate: libarchive security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libarchive is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): libarchive: Buffer Overflow vulnerability in libarchive (CVE-2025-25724) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2349221 - CVE-2025-25724 libarchive: Buffer Overflow vulnerability in libarchive CVEs CVE-2025-25724 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM libarchive-3.5.3-5.el9_4.1.src.rpm SHA-256: c5688e14cb5b5f2abf57c180a4766327878821957546e839cccf10934ee2637e x86_64 bsdcat-debuginfo-3.5.3-5.el9_4.1.i686.rpm SHA-256: 98df2a9415d7a93bfc34b9628fcf8f90fca81c3080c3be38b72fe0513b1c99df bsdcat-debuginfo-3.5.3-5.el9_4.1.i686.rpm SHA-256: 98df2a9415d7a93bfc34b9628fcf8f90fca81c3080c3be38b72fe0513b1c99df bsdcat-debuginfo-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: d0134895af66ab9db553ec8dd7b1c2d9991ac884a996bb1bf620c8aeb60b25be bsdcat-debuginfo-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: d0134895af66ab9db553ec8dd7b1c2d9991ac884a996bb1bf620c8aeb60b25be bsdcpio-debuginfo-3.5.3-5.el9_4.1.i686.rpm SHA-256: 65e6bb0d98045db051c845cd0040a4aedde4718cee0699f7b33cb8ae13361f06 bsdcpio-debuginfo-3.5.3-5.el9_4.1.i686.rpm SHA-256: 65e6bb0d98045db051c845cd0040a4aedde4718cee0699f7b33cb8ae13361f06 bsdcpio-debuginfo-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: a7226756d4f2cbb5e354cabf3e59f5e98c49928ff0e075b90a7b79dcba20e8f4 bsdcpio-debuginfo-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: a7226756d4f2cbb5e354cabf3e59f5e98c49928ff0e075b90a7b79dcba20e8f4 bsdtar-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: 2d43592459d70b0298afa93b946f2e95cf6272cfb18ba8b2083b4009df80ea27 bsdtar-debuginfo-3.5.3-5.el9_4.1.i686.rpm SHA-256: 59360f8e81c03eb71878de030c35b10d7cbe738679553b4be675056625e8bde2 bsdtar-debuginfo-3.5.3-5.el9_4.1.i686.rpm SHA-256: 59360f8e81c03eb71878de030c35b10d7cbe738679553b4be675056625e8bde2 bsdtar-debuginfo-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: bcf92e5eec8855c2e6cf969f8b6b0906d5c75148da1f56e4c521b0c7900e7823 bsdtar-debuginfo-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: bcf92e5eec8855c2e6cf969f8b6b0906d5c75148da1f56e4c521b0c7900e7823 libarchive-3.5.3-5.el9_4.1.i686.rpm SHA-256: 6c87ce15957bc2ce2308a1d584730a5e7d00af0f2ad7bae37e3a0226cb766ff5 libarchive-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: a46f7d6db53672e9aef267fc122b0005a278c4ce2b0bfbd5f90787c0d134d562 libarchive-debuginfo-3.5.3-5.el9_4.1.i686.rpm SHA-256: 3c94769550f0f5602911675153041dc7788c0492ccc6991a8bcd8a9809e64c14 libarchive-debuginfo-3.5.3-5.el9_4.1.i686.rpm SHA-256: 3c94769550f0f5602911675153041dc7788c0492ccc6991a8bcd8a9809e64c14 libarchive-debuginfo-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: 210c2c2d3f041a8c68701ffd41e861553260081f82b8c7f535f6feda12aa88b3 libarchive-debuginfo-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: 210c2c2d3f041a8c68701ffd41e861553260081f82b8c7f535f6feda12aa88b3 libarchive-debugsource-3.5.3-5.el9_4.1.i686.rpm SHA-256: d5cf5be8ed7543948bb46c3cf5c3e2e97326ab87bd8b620103ea015be70f66f6 libarchive-debugsource-3.5.3-5.el9_4.1.i686.rpm SHA-256: d5cf5be8ed7543948bb46c3cf5c3e2e97326ab87bd8b620103ea015be70f66f6 libarchive-debugsource-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: e94d0b25972b5a7baaa1f50dbb9bc531f6f66c345799b25df23e38be9bf38052 libarchive-debugsource-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: e94d0b25972b5a7baaa1f50dbb9bc531f6f66c345799b25df23e38be9bf38052 libarchive-devel-3.5.3-5.el9_4.1.i686.rpm SHA-256: 3d62ab1b1df5115fc68ff723c13d53b6284b2224203a8f9686dd7df0dabfd9a5 libarchive-devel-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: 0b6bfa26b3eae444bb1d001b34486bc920c070a3f74c64bb511da721a76437e9 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM libarchive-3.5.3-5.el9_4.1.src.rpm SHA-256: c5688e14cb5b5f2abf57c180a4766327878821957546e839cccf10934ee2637e ppc64le bsdcat-debuginfo-3.5.3-5.el9_4.1.ppc64le.rpm SHA-256: c8232d2c4e31e537d2fa1f6a9c85db36959b71947f66b9022241e22f4e96189a bsdcat-debuginfo-3.5.3-5.el9_4.1.ppc64le.rpm SHA-256: c8232d2c4e31e537d2fa1f6a9c85db36959b71947f66b9022241e22f4e96189a bsdcpio-debuginfo-3.5.3-5.el9_4.1.ppc64le.rpm SHA-256: 0363a15a7e67a890d3e443fe4fede051b6caa71f269ea7c697acec617c942478 bsdcpio-debuginfo-3.5.3-5.el9_4.1.ppc64le.rpm SHA-256: 0363a15a7e67a890d3e443fe4fede051b6caa71f269ea7c697acec617c942478 bsdtar-3.5.3-5.el9_4.1.ppc64le.rpm SHA-256: 64053b8d3563dbb7caf7a5e38cc641c24892ac2bc5ac02c14c29bf2a7dc1ace5 bsdtar-debuginfo-3.5.3-5.el9_4.1.ppc64le.rpm SHA-256: 0821a98146d808c62e54613a011490f819617c1de5787ff81bb7fa2c53901815 bsdtar-debuginfo-3.5.3-5.el9_4.1.ppc64le.rpm SHA-256: 0821a98146d808c62e54613a011490f819617c1de5787ff81bb7fa2c53901815 libarchive-3.5.3-5.el9_4.1.ppc64le.rpm SHA-256: da7cb044fc08a910c3b192f091533e0102ffd1efb992f288c2f9f439d13ac716 libarchive-debuginfo-3.5.3-5.el9_4.1.ppc64le.rpm SHA-256: c527d974219f19308a043884472d86e79fa1ef97fc423c1459b691058213a031 libarchive-debuginfo-3.5.3-5.el9_4.1.ppc64le.rpm SHA-256: c527d974219f19308a043884472d86e79fa1ef97fc423c1459b691058213a031 libarchive-debugsource-3.5.3-5.el9_4.1.ppc64le.rpm SHA-256: 3cf53ddf795c49e0be627ae476db34e970a8c0e8c7e0f62cff8dd83713061955 libarchive-debugsource-3.5.3-5.el9_4.1.ppc64le.rpm SHA-256: 3cf53ddf795c49e0be627ae476db34e970a8c0e8c7e0f62cff8dd83713061955 libarchive-devel-3.5.3-5.el9_4.1.ppc64le.rpm SHA-256: 71cf1c5baa8a918dd9fab0e64d794bc3cae7f9109ad4d0129015e26e28ef8722 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM libarchive-3.5.3-5.el9_4.1.src.rpm SHA-256: c5688e14cb5b5f2abf57c180a4766327878821957546e839cccf10934ee2637e x86_64 bsdcat-debuginfo-3.5.3-5.el9_4.1.i686.rpm SHA-256: 98df2a9415d7a93bfc34b9628fcf8f90fca81c3080c3be38b72fe0513b1c99df bsdcat-debuginfo-3.5.3-5.el9_4.1.i686.rpm SHA-256: 98df2a9415d7a93bfc34b9628fcf8f90fca81c3080c3be38b72fe0513b1c99df bsdcat-debuginfo-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: d0134895af66ab9db553ec8dd7b1c2d9991ac884a996bb1bf620c8aeb60b25be bsdcat-debuginfo-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: d0134895af66ab9db553ec8dd7b1c2d9991ac884a996bb1bf620c8aeb60b25be bsdcpio-debuginfo-3.5.3-5.el9_4.1.i686.rpm SHA-256: 65e6bb0d98045db051c845cd0040a4aedde4718cee0699f7b33cb8ae13361f06 bsdcpio-debuginfo-3.5.3-5.el9_4.1.i686.rpm SHA-256: 65e6bb0d98045db051c845cd0040a4aedde4718cee0699f7b33cb8ae13361f06 bsdcpio-debuginfo-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: a7226756d4f2cbb5e354cabf3e59f5e98c49928ff0e075b90a7b79dcba20e8f4 bsdcpio-debuginfo-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: a7226756d4f2cbb5e354cabf3e59f5e98c49928ff0e075b90a7b79dcba20e8f4 bsdtar-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: 2d43592459d70b0298afa93b946f2e95cf6272cfb18ba8b2083b4009df80ea27 bsdtar-debuginfo-3.5.3-5.el9_4.1.i686.rpm SHA-256: 59360f8e81c03eb71878de030c35b10d7cbe738679553b4be675056625e8bde2 bsdtar-debuginfo-3.5.3-5.el9_4.1.i686.rpm SHA-256: 59360f8e81c03eb71878de030c35b10d7cbe738679553b4be675056625e8bde2 bsdtar-debuginfo-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: bcf92e5eec8855c2e6cf969f8b6b0906d5c75148da1f56e4c521b0c7900e7823 bsdtar-debuginfo-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: bcf92e5eec8855c2e6cf969f8b6b0906d5c75148da1f56e4c521b0c7900e7823 libarchive-3.5.3-5.el9_4.1.i686.rpm SHA-256: 6c87ce15957bc2ce2308a1d584730a5e7d00af0f2ad7bae37e3a0226cb766ff5 libarchive-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: a46f7d6db53672e9aef267fc122b0005a278c4ce2b0bfbd5f90787c0d134d562 libarchive-debuginfo-3.5.3-5.el9_4.1.i686.rpm SHA-256: 3c94769550f0f5602911675153041dc7788c0492ccc6991a8bcd8a9809e64c14 libarchive-debuginfo-3.5.3-5.el9_4.1.i686.rpm SHA-256: 3c94769550f0f5602911675153041dc7788c0492ccc6991a8bcd8a9809e64c14 libarchive-debuginfo-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: 210c2c2d3f041a8c68701ffd41e861553260081f82b8c7f535f6feda12aa88b3 libarchive-debuginfo-3.5.3-5.el9_4.1.x86_64.rpm SHA-256: 210c2c2d3f041a8c68701ffd41e861553260081f82b8c7f535f6feda12aa88b3 libarchive-debugsource-3.5.3-5.el9_4.1.i686.rpm SHA-256: d5cf5be8ed7543948bb46c3cf5c3e2e97326ab87bd8b620103ea015be70f66f6 libarchive-debugsource-3.5.3-5.el9_4.1.i686.rpm SHA-256: d5cf5be8ed7543948bb46c3cf5c3e2e97326ab87bd8b620103ea015be7