CVE-2021-31566

An improper link resolution flaw can occur while extracting an archive
leading to changing modes, times, access control lists, and flags of a file
outside of the archive. An attacker may provide a malicious archive to a
victim user, who would trigger this flaw when trying to extract the
archive. A local attacker may use this flaw to gain more privileges in a
system.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1001990&gt;
• <https://github.com/libarchive/libarchive/issues/1566&gt;

Notes