https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:34:58.678601+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4179 ALSA-2021:4179 — Low: file-roller security update 2026-10-04T09:34:58.821931+00:00

Affected: AlmaLinux:8: file-roller

File Roller is an application for creating and viewing archives files, such as tar or zip files.

Security Fix(es):

* file-roller: directory traversal via directory symlink pointing outside of the target directory (incomplete fix for CVE-2020-11736) (CVE-2020-36314)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-00048 bdu:2022-00048 2026-10-04T09:34:58.821991+00:00 bdu:2022-00048 https://cve.radiocsirt.org/vuln/euvd-2026-48078 EUVD-2026-48078 2026-10-04T09:34:58.822007+00:00 EUVD-2026-48078 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36314 fkie_cve-2020-36314 2026-10-04T09:34:58.822019+00:00

fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-11736.

 https://cve.radiocsirt.org/vuln/ghsa-xf7f-5p7r-xc3c GHSA-xf7f-5p7r-xc3c 2026-10-04T09:34:58.822042+00:00

fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-11736.

 https://cve.radiocsirt.org/vuln/gsd-2020-36314 gsd-2020-36314 2026-10-04T09:34:58.822057+00:00 gsd-2020-36314 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10756-1 openSUSE-SU-2024:10756-1 — file-roller-3.40.0-3.2 on GA media 2026-10-04T09:34:58.822067+00:00

file-roller-3.40.0-3.2 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2025:0032-1 SUSE-SU-2025:0032-1 — Security update for file-roller 2026-10-04T09:34:58.822082+00:00

Security update for file-roller

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-36314 UBUNTU-CVE-2020-36314 2026-10-04T09:34:58.822095+00:00

Affected: Ubuntu:16.04:LTS: file-roller, Ubuntu:18.04:LTS: file-roller, Ubuntu:20.04:LTS: file-roller

fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-11736.