Medium ELSA-2020-4820 2 CVEs

Moderate: file-roller security update (Oracle Linux 8)

Published Nov 10, 2020 · Updated Nov 10, 2020

Ecosystem: Oracle Linux

Summary

[3.28.1-3]
- Fix CVE-2020-11736 (#1827395)
- Fix CVE-2019-16680 (#1767594)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	file-roller	0:3.28.1-3.el8

Vulnerabilities 2

Unscored —

CVE-2019-16680

An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename con…

file-roller file-roller Debian Ubuntu

Sep 21, 2019
Unscored —

CVE-2020-11736

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lac…

file-roller file-roller Debian Ubuntu

Apr 13, 2020