SUSE Libarchive Moderate Security Update Addressing Denial of Service Flaws

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

## This update for libarchive fixes the following issues: * creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable (bsc#1254340). * file descriptor leak in the mtree parser cleanup path could lead to file descriptor exhaustion and denial of service (bsc#1261003). * NULL pointer dereference in archive_acl_from_text_w() could lead to a segmentation fault (bsc#1260998). * reading from an invalid index when buffer size is smaller than H_LEVEL_OFFSET can lead to an out-of-bounds buffer overrun (bsc#1254341). * incorrect pointer handling for RAR5 files declaring over 8192 filters can lead to excessive resource usage and denial of service (bsc#1261002). ## Patch Instructions:

## This update for libarchive fixes the following issues: * creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable (bsc#1254340). * file descriptor leak in the mtree parser cleanup path could lead to file descriptor exhaustion and denial of service (bsc#1261003). * NULL pointer dereference in archive_acl_from_text_w() could lead to a segmentation fault (bsc#1260998). * reading from an invalid index when buffer size is smaller than H_LEVEL_OFFSET can lead to an out-of-bounds buffer overrun (bsc#1254341). * incorrect pointer handling for RAR5 files declaring over 8192 filters can lead to excessive resource usage and denial of service (bsc#1261002). ## Patch Instructions:

* SUSE Linux Enterprise Micro 5.3

* SUSE Linux Enterprise Micro 5.4

* SUSE Linux Enterprise Micro 5.5

* SUSE Linux Enterprise Micro for Rancher 5.3

* SUSE Linux Enterprise Micro for Rancher 5.4

An update that has five security fixes can now be installed.

*

*

*

*

*

Announcement ID: SUSE-SU-2026:3575-1 Release Date: 2026-08-11T08:38:07Z Rating: moderate

Get the latest Linux and open source security news straight to your inbox.