Most recent entries from all

ALSA-2021:4179 — Low: file-roller security update

Affected: AlmaLinux:8: file-roller

File Roller is an application for creating and viewing archives files, such as tar or zip files.

Security Fix(es):

* file-roller: directory traversal via directory symlink pointing outside of the target directory (incomplete fix for CVE-2020-11736) (CVE-2020-36314)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2021-01340

cnvd-2020-22856

EUVD-2026-40795

fkie_cve-2020-11736

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.

GHSA-jj2q-v22w-qp64

gsd-2020-11736

OESA-2021-1305 — file-roller security update

Affected: openEuler:20.03-LTS-SP1: file-roller, openEuler:20.03-LTS-SP2: file-roller

File Roller is an archive manager that you can create and modify archives; view the content of an archive;view and modify a file contained in the archive; extract files from the archive. Security Fix(es): fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.(CVE-2020-11736)

openSUSE-SU-2020:0825-1 — Security update for file-roller

Security update for file-roller

SUSE-SU-2020:1505-1 — Security update for file-roller

Security update for file-roller

UBUNTU-CVE-2020-11736

Affected: Ubuntu:16.04:LTS: file-roller, Ubuntu:18.04:LTS: file-roller, Ubuntu:20.04:LTS: file-roller

WID-SEC-W-2022-0193 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um die Verfügbarkeit, Integrität und Vertraulichkeit zu gefährden.