CVE-2021-36976

Debian Bug report logs - #991442 libarchive: CVE-2021-36976 Package: src:libarchive; Maintainer for src:libarchive is Peter Pentchev <roam@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 23 Jul 2021 18:30:04 UTC Severity: important Tags: security, upstream Found in version libarchive/3 ...

Several security issues were fixed in libarchive ...

A use-after-free flaw was found in libarchive in the copy_string function ...

libarchive 341 through 351 has a use-after-free in copy_string (called from do_uncompress_block and process_block) ...

An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive A local attacker may use this flaw to gain more privi ...

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security updates page Apple security documents reference vulnerabilities by CVE-ID&nbsp ...

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security updates page Apple security documents reference vulnerabilities by CVE-ID&nbsp ...