autoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-36241.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade webkit2gtk3-jscUpgrade gnome-softwareUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-drive-menuUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-control-centerUpgrade gnome-shell-extension-auto-move-windowsUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-dash-to-dockUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-window-listUpgrade gnome-software-develUpgrade gnome-shell-extension-top-iconsUpgrade LibRawUpgrade gnome-autoarUpgrade LibRaw-develUpgrade gnome-session-kiosk-sessionUpgrade gnome-online-accountsUpgrade gnome-shell-extension-updates-dialogUpgrade mutterUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-disable-screenshieldUpgrade gtk3Upgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-session-wayland-sessionUpgrade gsettings-desktop-schemas-develUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-online-accounts-develUpgrade gtk-update-icon-cacheUpgrade accountsserviceUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-calculatorUpgrade gtk3-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-settings-daemonUpgrade gdmUpgrade gnome-session-xsessionUpgrade webkit2gtk3Upgrade vinoUpgrade gnome-sessionUpgrade gnome-shell-extension-user-themeUpgrade accountsservice-develUpgrade gnome-shell-extension-places-menuUpgrade gnome-classic-sessionUpgrade mutter-develUpgrade accountsservice-libsUpgrade gnome-shellUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-window-grouper | May 4, 2022 | Mar 17, 2021 |
| Alpine Linux | — | Upgrade gnome-autoar | Aug 22, 2024 | Mar 17, 2021 |
| Centos_linux | — | Upgrade gtk3-develUpgrade gnome-calculatorUpgrade gnome-session-debuginfoUpgrade gnome-shell-extension-updates-dialogUpgrade LibRaw-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gdm-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-software-debugsourceUpgrade webkit2gtk3-debugsourceUpgrade vino-debugsourceUpgrade LibRaw-debugsourceUpgrade gnome-sessionUpgrade gnome-settings-daemonUpgrade gnome-autoar-debugsourceUpgrade accountsservice-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade mutter-debuginfoUpgrade gtk3-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade accountsserviceUpgrade gtk3-tests-debuginfoUpgrade gnome-control-centerUpgrade gnome-shell-extension-window-grouperUpgrade gnome-session-debugsourceUpgrade gnome-autoarUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-window-listUpgrade gnome-settings-daemon-debugsourceUpgrade gtk3Upgrade gnome-session-wayland-sessionUpgrade gnome-control-center-debuginfoUpgrade gnome-calculator-debuginfoUpgrade webkit2gtk3-develUpgrade webkit2gtk3-devel-debuginfoUpgrade mutterUpgrade gnome-online-accountsUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-online-accounts-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-autoar-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-online-accounts-develUpgrade LibRawUpgrade webkit2gtk3-jscUpgrade mutter-debugsourceUpgrade gtk3-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-user-themeUpgrade gsettings-desktop-schemasUpgrade vinoUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-places-menuUpgrade gnome-session-kiosk-sessionUpgrade accountsservice-libsUpgrade gnome-shell-extension-apps-menuUpgrade webkit2gtk3Upgrade gtk3-immodule-ximUpgrade gtk-update-icon-cache-debuginfoUpgrade mutter-tests-debuginfoUpgrade gnome-shell-debuginfoUpgrade gnome-session-xsessionUpgrade gnome-classic-sessionUpgrade accountsservice-debugsourceUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-workspace-indicatorUpgrade webkit2gtk3-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-extension-commonUpgrade gnome-shell-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-settings-daemon-debuginfoUpgrade vino-debuginfoUpgrade gdmUpgrade gnome-online-accounts-debugsourceUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade gtk3-immodule-xim-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gnome-softwareUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shellUpgrade gdm-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade gnome-calculator-debugsource | Nov 10, 2021 | Mar 17, 2021 |
| Debian | — | Upgrade gnome-autoar | Jul 30, 2024 | Mar 17, 2021 |
| Gentoo Linux | — | Upgrade app-arch/gnome-autoar. | May 28, 2021 | Mar 17, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gnome-autoar | May 18, 2021 | Mar 17, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/gnome-autoar to version 0.3.1-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Mar 17, 2021 |
| Oracle_linux | — | Upgrade gnome-autoarUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade mutter-develUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-systemMonitorUpgrade gtk3Upgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-panel-favoritesUpgrade gsettings-desktop-schemas-develUpgrade gtk3-immodule-ximUpgrade gnome-software-develUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-workspace-indicatorUpgrade accountsservice-develUpgrade gnome-shell-extension-user-themeUpgrade gdmUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-classic-sessionUpgrade LibRawUpgrade gnome-softwareUpgrade mutterUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shellUpgrade gnome-shell-extension-native-window-placementUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-top-iconsUpgrade webkit2gtk3Upgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-session-xsessionUpgrade LibRaw-develUpgrade gnome-online-accountsUpgrade gnome-control-centerUpgrade gnome-settings-daemonUpgrade vinoUpgrade gnome-sessionUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-launch-new-instanceUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-dash-to-dockUpgrade gtk3-develUpgrade accountsservice-libsUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-session-wayland-sessionUpgrade gnome-calculatorUpgrade accountsserviceUpgrade gnome-shell-extension-common | Nov 17, 2021 | Mar 1, 2021 |
| Redhat_linux | — | Upgrade LibRawUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-session-debugsourceUpgrade gnome-software-develUpgrade gtk3-immodule-ximUpgrade accountsservice-debugsourceUpgrade gnome-shell-extension-systemMonitorUpgrade webkit2gtk3-develUpgrade gnome-autoar-debugsourceUpgrade gnome-sessionUpgrade gnome-shell-extension-window-listUpgrade LibRaw-debuginfoUpgrade webkit2gtk3Upgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-debuginfoUpgrade gnome-softwareUpgrade gsettings-desktop-schemas-develUpgrade webkit2gtk3-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade mutter-tests-debuginfoUpgrade mutter-develUpgrade gnome-shell-extension-native-window-placementUpgrade gtk3-devel-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade mutterUpgrade gsettings-desktop-schemasUpgrade accountsserviceUpgrade gnome-software-debugsourceUpgrade mutter-debugsourceUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-control-centerUpgrade gnome-online-accounts-debuginfoUpgrade accountsservice-develUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-control-center-debuginfoUpgrade gdm-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-session-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gnome-calculator-debuginfoUpgrade gnome-shell-extension-commonUpgrade LibRaw-samples-debuginfoUpgrade gtk-update-icon-cacheUpgrade webkit2gtk3-jscUpgrade gnome-control-center-filesystemUpgrade accountsservice-libsUpgrade mutter-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-shell-extension-horizontal-workspacesUpgrade accountsservice-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shellUpgrade gtk3-tests-debuginfoUpgrade gtk3Upgrade gnome-online-accounts-develUpgrade vino-debugsourceUpgrade gnome-classic-sessionUpgrade gtk3-debuginfoUpgrade vinoUpgrade gnome-autoarUpgrade LibRaw-develUpgrade gnome-shell-extension-window-grouperUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk3-develUpgrade gnome-shell-extension-user-themeUpgrade vino-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-drive-menuUpgrade gnome-online-accountsUpgrade gdm-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-debugsourceUpgrade gnome-shell-extension-panel-favoritesUpgrade gdmUpgrade gnome-shell-extension-no-hot-cornerUpgrade LibRaw-debugsourceUpgrade gnome-calculatorUpgrade gnome-autoar-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-places-menuUpgrade gnome-session-xsessionUpgrade gtk3-immodules-debuginfoUpgrade gnome-calculator-debugsourceUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-dash-to-dock | Nov 10, 2021 | Mar 17, 2021 |
| Rocky_linux | — | Upgrade webkit2gtk3-jsc-develUpgrade gnome-control-center-debugsourceUpgrade gnome-control-centerUpgrade gnome-session-debuginfoUpgrade gsettings-desktop-schemasUpgrade webkit2gtk3-jscUpgrade accountsservice-libs-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-autoar-debugsourceUpgrade gnome-calculator-debugsourceUpgrade gnome-session-kiosk-sessionUpgrade accountsservice-debuginfoUpgrade LibRawUpgrade LibRaw-develUpgrade gnome-autoarUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gdmUpgrade gnome-control-center-debuginfoUpgrade gnome-softwareUpgrade gnome-software-develUpgrade mutterUpgrade gtk-update-icon-cache-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade gnome-online-accountsUpgrade mutter-debugsourceUpgrade accountsservice-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade webkit2gtk3-develUpgrade gnome-shell-debugsourceUpgrade gtk3-develUpgrade gdm-debugsourceUpgrade vinoUpgrade vino-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk3-debuginfoUpgrade mutter-develUpgrade gtk3-immodule-ximUpgrade gnome-shell-debuginfoUpgrade gnome-settings-daemonUpgrade vino-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade gdm-debuginfoUpgrade gnome-session-debugsourceUpgrade gtk3Upgrade gnome-online-accounts-debugsourceUpgrade webkit2gtk3Upgrade gnome-online-accounts-develUpgrade gnome-calculatorUpgrade gnome-session-wayland-sessionUpgrade accountsservice-develUpgrade accountsservice-libsUpgrade mutter-debuginfoUpgrade gtk-update-icon-cacheUpgrade LibRaw-debugsourceUpgrade gnome-software-debugsourceUpgrade gnome-shellUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gnome-sessionUpgrade gsettings-desktop-schemas-develUpgrade accountsserviceUpgrade LibRaw-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gtk3-debugsourceUpgrade webkit2gtk3-debugsourceUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-session-xsession | Mar 12, 2024 | Mar 17, 2021 |
| Suse | — | Upgrade typelib-1_0-gnomeautoar-0_1Upgrade libgnome-autoar-gtk-0-0Upgrade libgnome-autoar-0-0Upgrade typelib-1_0-gnomeautoargtk-0_1Upgrade gnome-autoar-devel | Oct 26, 2022 | Mar 17, 2021 |
| Ubuntu | — | Upgrade libgnome-autoar-0-0Upgrade libgnome-autoar-gtk-0-0 | May 7, 2021 | Mar 17, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub