CVE-2021-32610: Debian Linux

High severity, CVSS 7.1. EPSS: 73.4% chance of exploitation in the next 30 days.

In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.

Affected products

• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 33 only; version 34 only; version 35 only
• PHP Archive Tar: before 1.4.14 (fixed in 1.4.14)

Published 2021-07-30. Last modified 2026-06-17.