Arbitrary File Write

file-roller is vulnerable to arbitrary file write. The vulnerability exists through a directory symlink pointing outside of the target directory...

Path Traversal

file-roller is vulnerable to path traversal. An attacker is able to overwrite arbitrary files during archive extraction using ../ characters in a filename in a TAR archive...

file-roller: path traversal vulnerability via a specially crafted filename contained in malicious archive

A path traversal vulnerability was discovered in the file-roller Archive Manager for GNOME in the way file paths with special characters are sanitized. Archives containing the sequence of characters "../" in a file path may be vulnerable to this flaw. A remote attacker could exploit this flaw by...

Moderate: Red Hat Security Advisory: file-roller security update

An update for file-roller is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

file-roller: directory traversal via directory symlink pointing outside of the target directory

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location...

RHEL 8 : file-roller (RHSA-2020:4820)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4820 advisory. File Roller is an application for creating and viewing archives files, such as tar or zip files. Security Fixes: file-roller: path traversal...

Moderate: file-roller security update

File Roller is an application for creating and viewing archives files, such as tar or zip files. Security Fixes: file-roller: path traversal vulnerability via a specially crafted filename contained in malicious archive CVE-2019-16680 file-roller: directory traversal via directory symlink pointing...

file-roller security update

An update is available for file-roller. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list File Roller is an application for creating and viewing archives files, su...

RLSA-2020:4820 Moderate: file-roller security update

File Roller is an application for creating and viewing archives files, such as tar or zip files. Security Fixes: file-roller: path traversal vulnerability via a specially crafted filename contained in malicious archive CVE-2019-16680 file-roller: directory traversal via directory symlink pointing...

EulerOS 2.0 SP5 : file-roller (EulerOS-SA-2020-2244)

According to the version of the file-roller packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a...

Huawei EulerOS: Security Advisory for file-roller (EulerOS-SA-2020-2244)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for file-roller (EulerOS-SA-2020-2135)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : file-roller (EulerOS-SA-2020-2135)

According to the version of the file-roller packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a...

GLSA-202009-06 : GNOME File Roller: Directory traversal

The remote host is affected by the vulnerability described in GLSA-202009-06 GNOME File Roller: Directory traversal It was discovered that GNOME File Roller incorrectly handled symlinks. Impact : Please review the referenced CVE identifiers for details. Workaround : There is no known workaround a...

GNOME File Roller: Directory traversal

Background File Roller is an archive manager for the GNOME desktop environment. Description It was discovered that GNOME File Roller incorrectly handled symlinks. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround at this time. Resolution All...

openSUSE Security Update : file-roller (openSUSE-2020-825)

This update for file-roller fixes the following issues : - CVE-2020-11736: Fixed a directory traversal vulnerability due to improper checking whether a file's parent is an external symlink bsc1169428. - CVE-2019-16680: Fixed a path traversal vulnerability which could have allowed an overwriting o...

openSUSE: Security Advisory for file-roller (openSUSE-SU-2020:0825-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 Security Update : file-roller (SUSE-SU-2020:1557-1)

This update for file-roller fixes the following issues : CVE-2020-11736: Fixed a directory traversal vulnerability due to improper checking whether a file's parent is an external symlink bsc1169428. CVE-2019-16680: Fixed a path traversal vulnerability which could have allowed an overwriting of a...

OPENSUSE-SU-2020:0825-1 Security update for file-roller

This update for file-roller fixes the following issues: - CVE-2020-11736: Fixed a directory traversal vulnerability due to improper checking whether a file's parent is an external symlink bsc1169428. - CVE-2019-16680: Fixed a path traversal vulnerability which could have allowed an overwriting of...

SUSE SLES12 Security Update : file-roller (SUSE-SU-2020:1505-1)

This update for file-roller fixes the following issues : Security issue fixed : CVE-2020-11736: Fixed a directory traversal vulnerability due to improper checking whether a file's parent is an external symlink bsc1169428. Note that Tenable Network Security has extracted the preceding description...