Alpine/libarchive: medium 6.5

Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init.

Action: Upgrade libarchive to 3.6.1-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2022-26280#Alpine:v3.22/libarchive
• https://security.alpinelinux.org/vuln/CVE-2022-26280

published 2022-03-28T22:15:09.637Z · modified 2026-10-15T07:17:54.175403923Z · JSON