Red Hat Security Advisory

RHSA-2020:4820

file-roller security update

Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) file-roller-3.28.1-3.el8

Fixes 2 records

TI-2019-12476 CVE-2019-16680 · GHSA-63pg-53ch-332g

An issue was discovered in GNOME file-roller before 3.29.91.

LOW 24

An issue was discovered in GNOME file-roller before 3.29.91.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.02132 Published 2019-09-21 Partial fix CWE-22

TI-2020-09425 CVE-2020-11736 · GHSA-jj2q-v22w-qp64

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal…

LOW 20

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction…

CVSS 3.1LOW 3.9 Local Low privileges User interaction EPSS 0.00768 Published 2020-04-13 Partial fix CWE-22