libarchive
libarchive 3.8.9 · pkgs/by-name/li/libarchive/package.nix
Health
Risk
risk 44 high
- +28 2 open advisories
- +8 NIXPKGS-2026-2042 has a public exploit (CISA)
- +8 3.8.9 is behind upstream 3.8.10
Version
3.8.9 upstream 3.8.10
Channels
Hydra
succeeded 2w ago
Advisories
NIXPKGS-2026-2042 high 7.5 public exploit EPSS 0.8% Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() · #537359
CVE-2026-14164
NIXPKGS-2026-2158 low 3.9 EPSS 0.2% Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header · #542121
CVE-2026-15028
Packaging
not read yet: the next index sweep reads it
Maintainers
Pull requests 5
libarchive: add setup hook
#574369 by ShadowRZ · opened 1d ago · checks pass
libarchive: disable test_option_c.c test
#527396 by NilsIrl · opened 4mo ago
glibcLocales{,Utf8}: signal availability via `meta.platforms`, not `null`
#481844 by uninsane · opened 8mo ago
cygwin: add a system builder with a working nix draft
#447520 by corngood · opened 12mo ago · checks fail
libarchive: Fix pkg-config file
#326156 by Ericson2314 · opened 2y ago
Closed or merged in the synced window 7
[Backport staging-26.05] libarchive: 3.8.9 -> 3.8.10
#574593 by nixpkgs-ci · merged 8h ago
libarchive: 3.8.9 -> 3.8.10
#574213 by r-ryantm · merged 23h ago
[Backport staging-26.05] python314Packages.sh: ignore timing sensitive tests draft
#557463 by liberodark · closed 7w ago
staging-next-26.05 iteration 6 - 2026-08-28
#557258 by vcunat · merged 5w ago
[Backport staging-26.05] libarchive: 3.8.8 -> 3.8.9
#553710 by nixpkgs-ci · merged 7w ago
treewide: enable strictDeps and structuredAttrs for various low-level packages draft
#551108 by SFrijters · closed 6w ago
libarchive: 3.8.8 -> 3.8.9
#546722 by r-ryantm · merged 8w ago
Issues 3
Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header 1.severity: security
#542121 by nixpkgs-security-tracker · opened 3mo ago · 0 comments
Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() 1.severity: security
#537359 by nixpkgs-security-tracker · opened 3mo ago · 0 comments
Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive 1.severity: security
#507927 by nixpkgs-security-tracker · opened 6mo ago · 0 comments