CVE 2021-36976

libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).

Related bugs and status

CVE-2021-36976 (Candidate) is related to these bugs:

Bug #1967127: [FFe] update libarchive to 3.6.0

Summary				In	Importance	Status
	1967127	[FFe] update libarchive to 3.6.0		libarchive (Ubuntu)	Undecided	Fix Released
	1967127	[FFe] update libarchive to 3.6.0		evince (Ubuntu)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.