Summary
It was discovered that File Roller incorrectly handled symlinks.
An attacker could possibly use this issue to expose sensitive information.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | file-roller | 3.16.5-0ubuntu1.4 |
| Ubuntu · 18.04 LTS 18.04:LTS | file-roller | 3.28.0-1ubuntu1.2 |
Vulnerabilities 1
-
Unscored —
fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lac…
References
-
report
https://ubuntu.com/security/CVE-2020-11736