Description
Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to fr-archive-libarchive.c and fr-window.c.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | file-roller | 3.8.3-1 | — |
| Debian 13 | file-roller | 3.8.3-1 | — |
| Debian 12 | file-roller | 3.8.3-1 | — |
References
- USN-1906-1 vendor-advisory
- openSUSE-SU-2013:1281 vendor-advisory
- http://www.ocert.org/advisories/ocert-2013-001.html
- https://git.gnome.org/browse/file-roller/commit/?id=b147281293a8307808475e102a14857055f81631
- 54351 third-party-advisory
- 61008 vdb-entry
- 20130708 [oCERT-2013-001] File Roller path sanitization errors mailing-list