CVE-2021-36976

libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).

libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).

libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).

libarchive is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use libarchive.

Security Fix(es):

libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).(CVE-2021-36976)

libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).

Processing fixup entries may follow symbolic links. (CVE-2021-31566)

libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block). (CVE-2021-36976)

This update for libarchive fixes the following issues:

• CVE-2021-36976: Fixed an invalid memory access that could cause data corruption (bsc#1188572).

Non-security updates:

• Updated references for CVE-2017-5601, which was already fixed in a previous version (bsc#1022528 bsc#1189528).

These are all security issues fixed in the bsdtar-3.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

This update for libarchive fixes the following issues:

• CVE-2021-36976: Fixed an invalid memory access that could cause data corruption (bsc#1188572).

Non-security updates:

• Updated references for CVE-2017-5601, which was already fixed in a previous version (bsc#1022528 bsc#1189528).

This update for libarchive fixes the following issues:

• CVE-2021-36976: Fixed an invalid memory access that could cause data corruption (bsc#1188572).

Non-security updates:

• Updated references for CVE-2017-5601, which was already fixed in a previous version (bsc#1022528 bsc#1189528).

This update for libarchive fixes the following issues:

• CVE-2022-26280: Fixed out-of-bounds read via the component zipx_lzma_alone_init (bsc#1197634).
• CVE-2021-36976: Fixed use-after-free in copy_string (called from do_uncompress_block and process_block) (bsc#1188572).
• CVE-2017-5601: Fixed out-of-bounds memory access preventing denial-of-service (bsc#1197634, bsc#1189528).

It was discovered that libarchive incorrectly handled symlinks. If a user or automated system were tricked into processing a specially crafted archive, an attacker could possibly use this issue to change modes, times, ACLs, and flags on arbitrary files. (CVE-2021-23177, CVE-2021-31566)

It was discovered that libarchive incorrectly handled certain RAR archives. If a user or automated system were tricked into processing a specially crafted RAR archive, an attacker could use this issue to cause libarchive to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2021-36976)