Summary
It was discovered that GLib incorrectly handled certain symlinks when
replacing files. If a user or automated system were tricked into extracting
a specially crafted file with File Roller, a remote attacker could possibly
create files outside of the intended directory.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | glib2.0 | 2.48.2-0ubuntu4.8 |
| Ubuntu · 18.04 LTS 18.04:LTS | glib2.0 | 2.56.4-0ubuntu0.18.04.8 |
| Ubuntu · 20.04 LTS 20.04:LTS | glib2.0 | 2.64.6-1~ubuntu20.04.3 |
Vulnerabilities 1
-
Unscored —
An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATI…
References
-
report
https://ubuntu.com/security/CVE-2021-28153