Note:
This project will be discontinued after December 13, 2021. [more]
Product:
File\-Roller
(Gnome)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 3 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2021-04-07 | CVE-2020-36314 | fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-11736. | Fedora, File\-Roller | 3.9 | ||
| 2020-04-13 | CVE-2020-11736 | fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location. | Ubuntu_linux, Debian_linux, File\-Roller | 3.9 | ||
| 2019-09-21 | CVE-2019-16680 | An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename contained in a TAR archive, possibly overwriting a file during extraction. | Ubuntu_linux, Debian_linux, File\-Roller, Enterprise_linux | N/A |