红帽产品勘误 RHSA-2026:8534 - Security Advisory
发布：
2026-04-16
已更新：
2026-04-16

RHSA-2026:8534 - Security Advisory

概述

Important: libarchive security update

类型/严重性

Security Advisory: Important

Red Hat Insights 补丁分析

识别并修复受此公告影响的系统。

查看受影响的系统

标题

An update for libarchive is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

描述

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.

Security Fix(es):

  • libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing (CVE-2026-4424)
  • libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing (CVE-2026-5121)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解决方案

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

受影响的产品

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 8 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x

修复

  • BZ - 2449006 - CVE-2026-4424 libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing
  • BZ - 2452945 - CVE-2026-5121 libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing

Red Hat Enterprise Linux for x86_64 8

SRPM
libarchive-3.3.3-7.el8_10.src.rpm SHA-256: f88f2c1dcd64f94d2363370026a7d7963cd4f51ed56c441a79bcad5b60d015f4
x86_64
bsdcat-debuginfo-3.3.3-7.el8_10.i686.rpm SHA-256: db3776dbfff209fac0e213d6561400e6d8985e33b4b58642c98f3c11f7d3f431
bsdcat-debuginfo-3.3.3-7.el8_10.x86_64.rpm SHA-256: 23dd42bda1330ddc8313f6db356f8c8fd92717bf0bdadd28ca4b788457b6d452
bsdcpio-debuginfo-3.3.3-7.el8_10.i686.rpm SHA-256: 7136ef99f8c548bbdda494737a6cb873eec8dd95b47165a8ca496aefa3a47a4b
bsdcpio-debuginfo-3.3.3-7.el8_10.x86_64.rpm SHA-256: 404969987c41a6630b5b7da9605f5e62eae544dfbbf09da9178f0fbf93f48c2a
bsdtar-3.3.3-7.el8_10.x86_64.rpm SHA-256: e45ac1b85876a7a215f5e415f3ff2bac5c0da7c80a21c88bc74642c17b671e5e
bsdtar-debuginfo-3.3.3-7.el8_10.i686.rpm SHA-256: 8c6428dc71f245328abc8166d1cceb4045605c046631c5a005a9deba13c9f65a
bsdtar-debuginfo-3.3.3-7.el8_10.x86_64.rpm SHA-256: d69d80a4dc175a38c45ca1515b9738389e5cccbdb3c06d74cf92fc63a80a68e8
libarchive-3.3.3-7.el8_10.i686.rpm SHA-256: e6b8effe8b74ebb544b88255be1662109292d9c6177e30a83316be148bf79c76
libarchive-3.3.3-7.el8_10.x86_64.rpm SHA-256: d3bd32a9639ad70826818df0ddb7fbdce47c42e2059049d045ef3602edc1f5f3
libarchive-debuginfo-3.3.3-7.el8_10.i686.rpm SHA-256: b92d1683f5241673d9517c5c9f1027d64b8517ac4b08068fb5ae7c493878c02d
libarchive-debuginfo-3.3.3-7.el8_10.x86_64.rpm SHA-256: 56c3fd2a24f2216f738261388a8622a8d8fbb89d7327b59dec5abab02d146857
libarchive-debugsource-3.3.3-7.el8_10.i686.rpm SHA-256: e535d5e7b85490b3e432bd1c9585b2935fca17658a9b40d4320b0fa01083cb4b
libarchive-debugsource-3.3.3-7.el8_10.x86_64.rpm SHA-256: 1bddf210eb59401361ba32a5c388eb05e3a9bdf2960591ff12dd870e39b9b08f

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
libarchive-3.3.3-7.el8_10.src.rpm SHA-256: f88f2c1dcd64f94d2363370026a7d7963cd4f51ed56c441a79bcad5b60d015f4
s390x
bsdcat-debuginfo-3.3.3-7.el8_10.s390x.rpm SHA-256: 981f590a0d37d8ac07e034be35a8a3165873024adc828bbbb702a9ea4f279564
bsdcpio-debuginfo-3.3.3-7.el8_10.s390x.rpm SHA-256: 55b742bafd8f888d422c6ee8b9f11ff90df1ec2c4a93279860523d7ce8f40871
bsdtar-3.3.3-7.el8_10.s390x.rpm SHA-256: 315c5cb0944e5b05aa913a42ba3122a9d825037b4d38d95ae455f49e6e975263
bsdtar-debuginfo-3.3.3-7.el8_10.s390x.rpm SHA-256: 433527fb740c9ac529ca495e48ac2b66c0d3aa1138054cdaf879d6a79e829cd7
libarchive-3.3.3-7.el8_10.s390x.rpm SHA-256: d4081ae94112a77781edab529c6ef55cdffaeae2d105b481965ff0bd12be6d70
libarchive-debuginfo-3.3.3-7.el8_10.s390x.rpm SHA-256: 8bff6b07890b5dac609d8fa0f5e9ffd8afd212bf8afa830647ac790a902983fc
libarchive-debugsource-3.3.3-7.el8_10.s390x.rpm SHA-256: 5c62a43d0451f1c7d9ecae82f888e79419c1061398bb9af5c784186c7053a463

Red Hat Enterprise Linux for Power, little endian 8

SRPM
libarchive-3.3.3-7.el8_10.src.rpm SHA-256: f88f2c1dcd64f94d2363370026a7d7963cd4f51ed56c441a79bcad5b60d015f4
ppc64le
bsdcat-debuginfo-3.3.3-7.el8_10.ppc64le.rpm SHA-256: d657f187fd0fcacfb4b561670eb5105404aea191a8068363607ce0ff4d449881
bsdcpio-debuginfo-3.3.3-7.el8_10.ppc64le.rpm SHA-256: 4528de6a5af06f2699009f9f70acc8fecb35ea2c1ea6f76b2079465ff4af7aaa
bsdtar-3.3.3-7.el8_10.ppc64le.rpm SHA-256: 2412292297a3aaef7f66a952598cb79fff12e2be1b7d83e00fbd4ed1917d180f
bsdtar-debuginfo-3.3.3-7.el8_10.ppc64le.rpm SHA-256: 8d02661e0fdd51fda343c4014487913d30aa129d034e26bc5d025ec9b0bd2e07
libarchive-3.3.3-7.el8_10.ppc64le.rpm SHA-256: 7dbaf708f30d735d45353d730af4410cac01bfcf208f443922091cdc1123367c
libarchive-debuginfo-3.3.3-7.el8_10.ppc64le.rpm SHA-256: 35fedbf05333fd5d10e96b2e56c6858b65012e034c255f56424be38dc9df086e
libarchive-debugsource-3.3.3-7.el8_10.ppc64le.rpm SHA-256: 9c366d556534b092daa1219bc855ebd5f2353ccf1ac72144b55af9604c90765a

Red Hat Enterprise Linux for ARM 64 8

SRPM
libarchive-3.3.3-7.el8_10.src.rpm SHA-256: f88f2c1dcd64f94d2363370026a7d7963cd4f51ed56c441a79bcad5b60d015f4
aarch64
bsdcat-debuginfo-3.3.3-7.el8_10.aarch64.rpm SHA-256: ac019746d3fd1b4e7b2326cd829dbe119eeec5d079f0d1eacc5d881b9f39c779
bsdcpio-debuginfo-3.3.3-7.el8_10.aarch64.rpm SHA-256: 947e467c912b4b6bb358fc55e848b6a88a6a1b9ddb5242b2846612d69ab933ed
bsdtar-3.3.3-7.el8_10.aarch64.rpm SHA-256: 13efea72d7c743b82151f6ed60802675209d96d40784d39a7cf5b3c6f0b88724
bsdtar-debuginfo-3.3.3-7.el8_10.aarch64.rpm SHA-256: 4ce3f3aac16cab89a60bf105dc06f9c5f11bb9a0b575aace981ee18d53dab832
libarchive-3.3.3-7.el8_10.aarch64.rpm SHA-256: 9fd3794306509d4382513e83a4997de402bf9bd330520e32e618b3adc838899b
libarchive-debuginfo-3.3.3-7.el8_10.aarch64.rpm SHA-256: 865fbbbd9af561be2046df766cd3d8bbfaa9de5a791ea2a8f64b09d718a52662
libarchive-debugsource-3.3.3-7.el8_10.aarch64.rpm SHA-256: ebac525798889af49018390d1faf8f43a549019aaae12b93092327e813c60352

Red Hat CodeReady Linux Builder for x86_64 8

SRPM
x86_64
bsdcat-debuginfo-3.3.3-7.el8_10.i686.rpm SHA-256: db3776dbfff209fac0e213d6561400e6d8985e33b4b58642c98f3c11f7d3f431
bsdcat-debuginfo-3.3.3-7.el8_10.x86_64.rpm SHA-256: 23dd42bda1330ddc8313f6db356f8c8fd92717bf0bdadd28ca4b788457b6d452
bsdcpio-debuginfo-3.3.3-7.el8_10.i686.rpm SHA-256: 7136ef99f8c548bbdda494737a6cb873eec8dd95b47165a8ca496aefa3a47a4b
bsdcpio-debuginfo-3.3.3-7.el8_10.x86_64.rpm SHA-256: 404969987c41a6630b5b7da9605f5e62eae544dfbbf09da9178f0fbf93f48c2a
bsdtar-debuginfo-3.3.3-7.el8_10.i686.rpm SHA-256: 8c6428dc71f245328abc8166d1cceb4045605c046631c5a005a9deba13c9f65a
bsdtar-debuginfo-3.3.3-7.el8_10.x86_64.rpm SHA-256: d69d80a4dc175a38c45ca1515b9738389e5cccbdb3c06d74cf92fc63a80a68e8
libarchive-debuginfo-3.3.3-7.el8_10.i686.rpm SHA-256: b92d1683f5241673d9517c5c9f1027d64b8517ac4b08068fb5ae7c493878c02d
libarchive-debuginfo-3.3.3-7.el8_10.x86_64.rpm SHA-256: 56c3fd2a24f2216f738261388a8622a8d8fbb89d7327b59dec5abab02d146857
libarchive-debugsource-3.3.3-7.el8_10.i686.rpm SHA-256: e535d5e7b85490b3e432bd1c9585b2935fca17658a9b40d4320b0fa01083cb4b
libarchive-debugsource-3.3.3-7.el8_10.x86_64.rpm SHA-256: 1bddf210eb59401361ba32a5c388eb05e3a9bdf2960591ff12dd870e39b9b08f
libarchive-devel-3.3.3-7.el8_10.i686.rpm SHA-256: 286869c7ec83e266fdfef593eec4d1f773399c19f642355aaca4cc9e13182d23
libarchive-devel-3.3.3-7.el8_10.x86_64.rpm SHA-256: 77eefc8f9421e101ebfef613b8206749bbc53afac5c116e815b54e6c210cd757

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM
ppc64le
bsdcat-debuginfo-3.3.3-7.el8_10.ppc64le.rpm SHA-256: d657f187fd0fcacfb4b561670eb5105404aea191a8068363607ce0ff4d449881
bsdcpio-debuginfo-3.3.3-7.el8_10.ppc64le.rpm SHA-256: 4528de6a5af06f2699009f9f70acc8fecb35ea2c1ea6f76b2079465ff4af7aaa
bsdtar-debuginfo-3.3.3-7.el8_10.ppc64le.rpm SHA-256: 8d02661e0fdd51fda343c4014487913d30aa129d034e26bc5d025ec9b0bd2e07
libarchive-debuginfo-3.3.3-7.el8_10.ppc64le.rpm SHA-256: 35fedbf05333fd5d10e96b2e56c6858b65012e034c255f56424be38dc9df086e
libarchive-debugsource-3.3.3-7.el8_10.ppc64le.rpm SHA-256: 9c366d556534b092daa1219bc855ebd5f2353ccf1ac72144b55af9604c90765a
libarchive-devel-3.3.3-7.el8_10.ppc64le.rpm SHA-256: 0760fb4609382c64554ea36cc13c738b8b9ee133e4209141e17709339bb66ad6

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM
aarch64
bsdcat-debuginfo-3.3.3-7.el8_10.aarch64.rpm SHA-256: ac019746d3fd1b4e7b2326cd829dbe119eeec5d079f0d1eacc5d881b9f39c779
bsdcpio-debuginfo-3.3.3-7.el8_10.aarch64.rpm SHA-256: 947e467c912b4b6bb358fc55e848b6a88a6a1b9ddb5242b2846612d69ab933ed
bsdtar-debuginfo-3.3.3-7.el8_10.aarch64.rpm SHA-256: 4ce3f3aac16cab89a60bf105dc06f9c5f11bb9a0b575aace981ee18d53dab832
libarchive-debuginfo-3.3.3-7.el8_10.aarch64.rpm SHA-256: 865fbbbd9af561be2046df766cd3d8bbfaa9de5a791ea2a8f64b09d718a52662
libarchive-debugsource-3.3.3-7.el8_10.aarch64.rpm SHA-256: ebac525798889af49018390d1faf8f43a549019aaae12b93092327e813c60352
libarchive-devel-3.3.3-7.el8_10.aarch64.rpm SHA-256: 79d96b19ed0cafb6ac323c7524b40ff8cd3e17151512958cc1484b1470b70980

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM
s390x
bsdcat-debuginfo-3.3.3-7.el8_10.s390x.rpm SHA-256: 981f590a0d37d8ac07e034be35a8a3165873024adc828bbbb702a9ea4f279564
bsdcpio-debuginfo-3.3.3-7.el8_10.s390x.rpm SHA-256: 55b742bafd8f888d422c6ee8b9f11ff90df1ec2c4a93279860523d7ce8f40871
bsdtar-debuginfo-3.3.3-7.el8_10.s390x.rpm SHA-256: 433527fb740c9ac529ca495e48ac2b66c0d3aa1138054cdaf879d6a79e829cd7
libarchive-debuginfo-3.3.3-7.el8_10.s390x.rpm SHA-256: 8bff6b07890b5dac609d8fa0f5e9ffd8afd212bf8afa830647ac790a902983fc
libarchive-debugsource-3.3.3-7.el8_10.s390x.rpm SHA-256: 5c62a43d0451f1c7d9ecae82f888e79419c1061398bb9af5c784186c7053a463
libarchive-devel-3.3.3-7.el8_10.s390x.rpm SHA-256: 884aefa92fd5143bf8194bcc24661909b15fe9b60dc8ba443712716d6bef64c6

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10

SRPM
libarchive-3.3.3-7.el8_10.src.rpm SHA-256: f88f2c1dcd64f94d2363370026a7d7963cd4f51ed56c441a79bcad5b60d015f4
x86_64
bsdcat-debuginfo-3.3.3-7.el8_10.i686.rpm SHA-256: db3776dbfff209fac0e213d6561400e6d8985e33b4b58642c98f3c11f7d3f431
bsdcat-debuginfo-3.3.3-7.el8_10.x86_64.rpm SHA-256: 23dd42bda1330ddc8313f6db356f8c8fd92717bf0bdadd28ca4b788457b6d452
bsdcpio-debuginfo-3.3.3-7.el8_10.i686.rpm SHA-256: 7136ef99f8c548bbdda494737a6cb873eec8dd95b47165a8ca496aefa3a47a4b
bsdcpio-debuginfo-3.3.3-7.el8_10.x86_64.rpm SHA-256: 404969987c41a6630b5b7da9605f5e62eae544dfbbf09da9178f0fbf93f48c2a
bsdtar-3.3.3-7.el8_10.x86_64.rpm SHA-256: e45ac1b85876a7a215f5e415f3ff2bac5c0da7c80a21c88bc74642c17b671e5e
bsdtar-debuginfo-3.3.3-7.el8_10.i686.rpm SHA-256: 8c6428dc71f245328abc8166d1cceb4045605c046631c5a005a9deba13c9f65a
bsdtar-debuginfo-3.3.3-7.el8_10.x86_64.rpm SHA-256: d69d80a4dc175a38c45ca1515b9738389e5cccbdb3c06d74cf92fc63a80a68e8
libarchive-3.3.3-7.el8_10.i686.rpm SHA-256: e6b8effe8b74ebb544b88255be1662109292d9c6177e30a83316be148bf79c76
libarchive-3.3.3-7.el8_10.x86_64.rpm SHA-256: d3bd32a9639ad70826818df0ddb7fbdce47c42e2059049d045ef3602edc1f5f3
libarchive-debuginfo-3.3.3-7.el8_10.i686.rpm SHA-256: b92d1683f5241673d9517c5c9f1027d64b8517ac4b08068fb5ae7c493878c02d
libarchive-debuginfo-3.3.3-7.el8_10.x86_64.rpm SHA-256: 56c3fd2a24f2216f738261388a8622a8d8fbb89d7327b59dec5abab02d146857
libarchive-debugsource-3.3.3-7.el8_10.i686.rpm SHA-256: e535d5e7b85490b3e432bd1c9585b2935fca17658a9b40d4320b0fa01083cb4b
libarchive-debugsource-3.3.3-7.el8_10.x86_64.rpm SHA-256: 1bddf210eb59401361ba32a5c388eb05e3a9bdf2960591ff12dd870e39b9b08f

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10

SRPM
libarchive-3.3.3-7.el8_10.src.rpm SHA-256: f88f2c1dcd64f94d2363370026a7d7963cd4f51ed56c441a79bcad5b60d015f4
aarch64
bsdcat-debuginfo-3.3.3-7.el8_10.aarch64.rpm SHA-256: ac019746d3fd1b4e7b2326cd829dbe119eeec5d079f0d1eacc5d881b9f39c779
bsdcpio-debuginfo-3.3.3-7.el8_10.aarch64.rpm SHA-256: 947e467c912b4b6bb358fc55e848b6a88a6a1b9ddb5242b2846612d69ab933ed
bsdtar-3.3.3-7.el8_10.aarch64.rpm SHA-256: 13efea72d7c743b82151f6ed60802675209d96d40784d39a7cf5b3c6f0b88724
bsdtar-debuginfo-3.3.3-7.el8_10.aarch64.rpm SHA-256: 4ce3f3aac16cab89a60bf105dc06f9c5f11bb9a0b575aace981ee18d53dab832
libarchive-3.3.3-7.el8_10.aarch64.rpm SHA-256: 9fd3794306509d4382513e83a4997de402bf9bd330520e32e618b3adc838899b
libarchive-debuginfo-3.3.3-7.el8_10.aarch64.rpm SHA-256: 865fbbbd9af561be2046df766cd3d8bbfaa9de5a791ea2a8f64b09d718a52662
libarchive-debugsource-3.3.3-7.el8_10.aarch64.rpm SHA-256: ebac525798889af49018390d1faf8f43a549019aaae12b93092327e813c60352

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10

SRPM
libarchive-3.3.3-7.el8_10.src.rpm SHA-256: f88f2c1dcd64f94d2363370026a7d7963cd4f51ed56c441a79bcad5b60d015f4
ppc64le
bsdcat-debuginfo-3.3.3-7.el8_10.ppc64le.rpm SHA-256: d657f187fd0fcacfb4b561670eb5105404aea191a8068363607ce0ff4d449881
bsdcpio-debuginfo-3.3.3-7.el8_10.ppc64le.rpm SHA-256: 4528de6a5af06f2699009f9f70acc8fecb35ea2c1ea6f76b2079465ff4af7aaa
bsdtar-3.3.3-7.el8_10.ppc64le.rpm SHA-256: 2412292297a3aaef7f66a952598cb79fff12e2be1b7d83e00fbd4ed1917d180f
bsdtar-debuginfo-3.3.3-7.el8_10.ppc64le.rpm SHA-256: 8d02661e0fdd51fda343c4014487913d30aa129d034e26bc5d025ec9b0bd2e07
libarchive-3.3.3-7.el8_10.ppc64le.rpm SHA-256: 7dbaf708f30d735d45353d730af4410cac01bfcf208f443922091cdc1123367c
libarchive-debuginfo-3.3.3-7.el8_10.ppc64le.rpm SHA-256: 35fedbf05333fd5d10e96b2e56c6858b65012e034c255f56424be38dc9df086e
libarchive-debugsource-3.3.3-7.el8_10.ppc64le.rpm SHA-256: 9c366d556534b092daa1219bc855ebd5f2353ccf1ac72144b55af9604c90765a

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10

SRPM
libarchive-3.3.3-7.el8_10.src.rpm SHA-256: f88f2c1dcd64f94d2363370026a7d7963cd4f51ed56c441a79bcad5b60d015f4
s390x
bsdcat-debuginfo-3.3.3-7.el8_10.s390x.rpm SHA-256: 981f590a0d37d8ac07e034be35a8a3165873024adc828bbbb702a9ea4f279564
bsdcpio-debuginfo-3.3.3-7.el8_10.s390x.rpm SHA-256: 55b742bafd8f888d422c6ee8b9f11ff90df1ec2c4a93279860523d7ce8f40871
bsdtar-3.3.3-7.el8_10.s390x.rpm SHA-256: 315c5cb0944e5b05aa913a42ba3122a9d825037b4d38d95ae455f49e6e975263
bsdtar-debuginfo-3.3.3-7.el8_10.s390x.rpm SHA-256: 433527fb740c9ac529ca495e48ac2b66c0d3aa1138054cdaf879d6a79e829cd7
libarchive-3.3.3-7.el8_10.s390x.rpm SHA-256: d4081ae94112a77781edab529c6ef55cdffaeae2d105b481965ff0bd12be6d70
libarchive-debuginfo-3.3.3-7.el8_10.s390x.rpm SHA-256: 8bff6b07890b5dac609d8fa0f5e9ffd8afd212bf8afa830647ac790a902983fc
libarchive-debugsource-3.3.3-7.el8_10.s390x.rpm SHA-256: 5c62a43d0451f1c7d9ecae82f888e79419c1061398bb9af5c784186c7053a463

Red Hat 安全团队联络方式为 secalert@redhat.com。 更多联络细节请参考 https://access.redhat.com/security/team/contact/。