Alpine/libarchive: medium 6.5

libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).

Action: Upgrade libarchive to 3.6.0-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2021-36976#Alpine:v3.23/libarchive
• https://security.alpinelinux.org/vuln/CVE-2021-36976

published 2021-07-20T07:15:07.950Z · modified 2026-10-23T17:17:56.202724800Z · JSON