libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block). CREATE(Triage):(User=admin) CVE-2021-36976 (https://nvd.nist.gov/vuln/detail/CVE-2021-36976)