Summary
It was discovered that File Roller incorrectly handled symlinks. If a user were
tricked into extracting a specially-crafted archive, an attacker could delete
files outside of the extraction directory.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | file-roller | 3.10.2.1-0ubuntu4.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | file-roller | 3.16.5-0ubuntu1.2 |
Vulnerabilities 1
-
Unscored —
The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to de…