RHSA-2026:30333MediumCVSS 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
June 26, 2026
Last Modified
October 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-14164 →

📋 Description

CVE-2026-14164 — libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()

🎯 Affected products14

  • Red Hat Hardened Images
  • bsdcat-0:3.8.8-2.hum1@aarch64 as a component of Red Hat Hardened Images
  • bsdcat-0:3.8.8-2.hum1@x86_64 as a component of Red Hat Hardened Images
  • bsdcpio-0:3.8.8-2.hum1@aarch64 as a component of Red Hat Hardened Images
  • bsdcpio-0:3.8.8-2.hum1@x86_64 as a component of Red Hat Hardened Images
  • bsdtar-0:3.8.8-2.hum1@aarch64 as a component of Red Hat Hardened Images
  • bsdtar-0:3.8.8-2.hum1@x86_64 as a component of Red Hat Hardened Images
  • bsdunzip-0:3.8.8-2.hum1@aarch64 as a component of Red Hat Hardened Images
  • bsdunzip-0:3.8.8-2.hum1@x86_64 as a component of Red Hat Hardened Images
  • libarchive-0:3.8.8-2.hum1@aarch64 as a component of Red Hat Hardened Images
  • libarchive-0:3.8.8-2.hum1@src as a component of Red Hat Hardened Images
  • libarchive-0:3.8.8-2.hum1@x86_64 as a component of Red Hat Hardened Images
  • libarchive-devel-0:3.8.8-2.hum1@aarch64 as a component of Red Hat Hardened Images
  • libarchive-devel-0:3.8.8-2.hum1@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: No mitigation is currently available that meets Red Hat Product Security's standards for usability, deployment, applicability, or stability. Customers are advised to apply the appropriate security update once it becomes available.

🔗 References (5)