Moderate: file-roller security update

File Roller is an application for creating and viewing archives files, such as tar or zip files. Security Fixes: file-roller: path traversal vulnerability via a specially crafted filename contained in malicious archive CVE-2019-16680 file-roller: directory traversal via directory symlink pointing...

file-roller security update

An update is available for file-roller. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list File Roller is an application for creating and viewing archives files, su...

RLSA-2020:4820 Moderate: file-roller security update

File Roller is an application for creating and viewing archives files, such as tar or zip files. Security Fixes: file-roller: path traversal vulnerability via a specially crafted filename contained in malicious archive CVE-2019-16680 file-roller: directory traversal via directory symlink pointing...

EulerOS 2.0 SP5 : file-roller (EulerOS-SA-2020-2244)

According to the version of the file-roller packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a...

Huawei EulerOS: Security Advisory for file-roller (EulerOS-SA-2020-2244)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for file-roller (EulerOS-SA-2020-2135)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : file-roller (EulerOS-SA-2020-2135)

According to the version of the file-roller packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a...

GLSA-202009-06 : GNOME File Roller: Directory traversal

The remote host is affected by the vulnerability described in GLSA-202009-06 GNOME File Roller: Directory traversal It was discovered that GNOME File Roller incorrectly handled symlinks. Impact : Please review the referenced CVE identifiers for details. Workaround : There is no known workaround a...

GNOME File Roller: Directory traversal

Background File Roller is an archive manager for the GNOME desktop environment. Description It was discovered that GNOME File Roller incorrectly handled symlinks. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround at this time. Resolution All...

openSUSE Security Update : file-roller (openSUSE-2020-825)

This update for file-roller fixes the following issues : - CVE-2020-11736: Fixed a directory traversal vulnerability due to improper checking whether a file's parent is an external symlink bsc1169428. - CVE-2019-16680: Fixed a path traversal vulnerability which could have allowed an overwriting o...

openSUSE: Security Advisory for file-roller (openSUSE-SU-2020:0825-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 Security Update : file-roller (SUSE-SU-2020:1557-1)

This update for file-roller fixes the following issues : CVE-2020-11736: Fixed a directory traversal vulnerability due to improper checking whether a file's parent is an external symlink bsc1169428. CVE-2019-16680: Fixed a path traversal vulnerability which could have allowed an overwriting of a...

OPENSUSE-SU-2020:0825-1 Security update for file-roller

This update for file-roller fixes the following issues: - CVE-2020-11736: Fixed a directory traversal vulnerability due to improper checking whether a file's parent is an external symlink bsc1169428. - CVE-2019-16680: Fixed a path traversal vulnerability which could have allowed an overwriting of...

SUSE SLES12 Security Update : file-roller (SUSE-SU-2020:1505-1)

This update for file-roller fixes the following issues : Security issue fixed : CVE-2020-11736: Fixed a directory traversal vulnerability due to improper checking whether a file's parent is an external symlink bsc1169428. Note that Tenable Network Security has extracted the preceding description...

Security update for file-roller (low)

openSUSE Security Update: Security update for file-roller Announcement ID: openSUSE-SU-2020:0825-1 Rating: low References: 1151585 1169428 Cross-References: CVE-2019-16680 CVE-2020-11736 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description:...

SUSE-SU-2020:1557-1 Security update for file-roller

This update for file-roller fixes the following issues: - CVE-2020-11736: Fixed a directory traversal vulnerability due to improper checking whether a file's parent is an external symlink bsc1169428. - CVE-2019-16680: Fixed a path traversal vulnerability which could have allowed an overwriting of...

SUSE-SU-2020:1505-1 Security update for file-roller

This update for file-roller fixes the following issues: Security issue fixed: - CVE-2020-11736: Fixed a directory traversal vulnerability due to improper checking whether a file's parent is an external symlink bsc1169428...

Updated file-roller packages fix security vulnerability

Updated the file-roller package in order to fix a security vulnerability: fr-archive-libarchive.c: File Roller lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location. Thus, directory traversal is not prevented CVE-2020-11736...

MGASA-2020-0218 Updated file-roller packages fix security vulnerability

Updated the file-roller package in order to fix a security vulnerability: fr-archive-libarchive.c: File Roller lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location. Thus, directory traversal is not prevented CVE-2020-11736...

Ubuntu: Security Advisory (USN-4332-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...