Libarchive: libarchive: use-after-free via aliased mac metadata copy

Summary

Mariner

Products covered

• azl3 cmake 3.30.3-15 on Azure Linux 3.0

• azl3 libarchive 3.7.7-7 on Azure Linux 3.0

Remediation

Release Notes

CVEs in this advisory 1

CVE-2026-17591

Updates

1. Oct 21, 2026 at 1:11 AM UTC
   Published by Microsoft Security Response Center

   The publication date reported by the vendor.

2. Oct 21, 2026 at 7:30 PM UTC
   Added to SecurityAlert

   We collected the advisory from the official source.