Summary
It was discovered that GNOME Files incorrectly handled certain filenames.
An attacker could possibly use this issue to cause GNOME Files to crash,
leading to a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | nautilus | 1:3.26.4-0~ubuntu18.04.6 |
| Ubuntu · 20.04 LTS 20.04:LTS | nautilus | 1:3.36.3-0ubuntu1.20.04.2 |
| Ubuntu · 22.04 LTS 22.04:LTS | nautilus | 1:42.2-0ubuntu2.1 |
Vulnerabilities 1
-
Medium 5.5
GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive.
References
-
report
https://ubuntu.com/security/CVE-2022-37290