Debian/libarchive: medium 6.5

libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).

Action: Upgrade libarchive to 3.6.0-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2021-36976#Debian:13/libarchive
• https://security-tracker.debian.org/tracker/CVE-2021-36976

published 2021-07-20T07:15:07.950Z · modified 2026-10-23T18:03:30.279204140Z · JSON