Lucene search
Gentoo FoundationMGASA-2021-0274HistoryJun 23, 2021 - 8:11 p.m.
Updated gnome-autoar packages fix a security vulnerability
2021-06-2320:11:28
Gentoo Foundation
advisories.mageia.org
12
0.0005 Low
EPSS
Percentile
16.6%
gnome-autoar: directory traversal during extraction because it lacks a check of whether a file’s parent is a symlink in certain complex situations (CVE-2021-28650). Also the previous update (Bug 28454) introduced a regression, fixed here.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 7 | noarch | gnome-autoar | <Â 0.3.1-1 | gnome-autoar-0.3.1-1.mga7 |
| Mageia | 8 | noarch | gnome-autoar | <Â 0.3.1-1 | gnome-autoar-0.3.1-1.mga8 |
Related
openvas
openvas
Ubuntu: Security Advisory (USN-4937-1)
2021-05-07 00:00:00
Huawei EulerOS: Security Advisory for gnome-autoar (EulerOS-SA-2021-1873)
2021-05-19 00:00:00
Mageia: Security Advisory (MGASA-2021-0274)
2022-01-28 00:00:00
nessus
nessus
EulerOS 2.0 SP8 : gnome-autoar (EulerOS-SA-2021-1873)
2021-05-18 00:00:00
GLSA-202105-10 : GNOME Autoar: User-assisted execution of arbitrary code
2021-05-27 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : GNOME Autoar vulnerability (USN-4937-1)
2021-05-07 00:00:00
osv
osv
gnome-autoar vulnerability
2021-05-06 11:15:45
CVE-2021-28650
2021-03-17 06:15:14
Moderate: GNOME security, bug fix, and enhancement update
2021-11-09 09:15:15
ubuntu
ubuntu
GNOME Autoar vulnerability
2021-05-06 00:00:00
veracode
veracode
Directory Traversal
2021-04-22 09:15:20
fedora
fedora
[SECURITY] Fedora 34 Update: glib-networking-2.68~rc-1.fc34
2021-03-20 00:21:34
[SECURITY] Fedora 34 Update: gnome-shell-40.0~rc-1.fc34
2021-03-20 00:21:37
[SECURITY] Fedora 34 Update: gnome-disk-utility-40~rc-1.fc34
2021-03-20 00:21:36
alpinelinux
alpinelinux
CVE-2021-28650
2021-03-17 06:15:00
ubuntucve
ubuntucve
CVE-2021-28650
2021-03-17 00:00:00
cvelist
cvelist
CVE-2021-28650
2021-03-17 05:51:33
debiancve
debiancve
CVE-2021-28650
2021-03-17 06:15:00
prion
prion
Directory traversal
2021-03-17 06:15:00
redhatcve
redhatcve
CVE-2021-28650
2021-03-17 13:46:38
cve
cve
CVE-2021-28650
2021-03-17 06:15:00
gentoo
gentoo
GNOME Autoar: User-assisted execution of arbitrary code
2021-05-26 00:00:00
oraclelinux
oraclelinux
GNOME security, bug fix, and enhancement update
2021-11-16 00:00:00
rocky
rocky
GNOME security, bug fix, and enhancement update
2021-11-09 09:15:15
almalinux
almalinux
Moderate: GNOME security, bug fix, and enhancement update
2021-11-09 09:15:15
redhat
redhat
ibm
ibm