autoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-36241.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gtk-update-icon-cacheUpgrade accountsservice-libsUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-windowsNavigatorUpgrade vinoUpgrade mutter-develUpgrade accountsserviceUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-apps-menuUpgrade gnome-control-center-filesystemUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-native-window-placementUpgrade gtk3Upgrade gnome-settings-daemonUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-window-grouperUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade webkit2gtk3Upgrade accountsservice-develUpgrade gnome-sessionUpgrade gnome-shellUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-panel-favoritesUpgrade gtk3-develUpgrade gnome-shell-extension-desktop-iconsUpgrade gsettings-desktop-schemas-develUpgrade gdmUpgrade gnome-session-wayland-sessionUpgrade gnome-calculatorUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-window-listUpgrade gnome-softwareUpgrade gnome-control-centerUpgrade mutterUpgrade webkit2gtk3-jscUpgrade gnome-session-kiosk-sessionUpgrade LibRaw-develUpgrade gnome-autoarUpgrade gnome-software-develUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-disable-screenshieldUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-commonUpgrade webkit2gtk3-develUpgrade gnome-online-accountsUpgrade gtk3-immodule-ximUpgrade LibRawUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-updates-dialogUpgrade webkit2gtk3-jsc-devel | May 4, 2022 | Mar 17, 2021 |
| Alpine Linux | — | Upgrade gnome-autoar | Aug 22, 2024 | Mar 17, 2021 |
| Centos_linux | — | Upgrade gnome-shell-extension-apps-menuUpgrade webkit2gtk3-debuginfoUpgrade gtk3-immodule-ximUpgrade accountsservice-debugsourceUpgrade gnome-online-accounts-develUpgrade gnome-shell-debuginfoUpgrade gnome-shellUpgrade webkit2gtk3Upgrade gnome-online-accounts-debugsourceUpgrade gnome-software-debuginfoUpgrade gnome-control-center-filesystemUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade vino-debuginfoUpgrade gdmUpgrade gnome-shell-debugsourceUpgrade gnome-classic-sessionUpgrade gnome-session-xsessionUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-softwareUpgrade gtk3-immodules-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gdm-debugsourceUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-windowsNavigatorUpgrade accountsservice-libs-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-systemMonitorUpgrade gtk-update-icon-cacheUpgrade webkit2gtk3-jscUpgrade vinoUpgrade gtk3-debuginfoUpgrade LibRawUpgrade mutter-debugsourceUpgrade accountsservice-libsUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-user-themeUpgrade gnome-autoar-debuginfoUpgrade gnome-calculator-debugsourceUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-workspace-indicatorUpgrade mutter-tests-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade accountsservice-debuginfoUpgrade gnome-shell-extension-window-listUpgrade gnome-control-center-debuginfoUpgrade gtk3-debugsourceUpgrade gdm-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade gnome-software-debugsourceUpgrade gnome-autoar-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade LibRaw-debuginfoUpgrade gnome-sessionUpgrade gtk3Upgrade gnome-settings-daemon-debugsourceUpgrade gnome-calculator-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade mutterUpgrade gnome-online-accountsUpgrade gnome-shell-extension-drive-menuUpgrade gtk3-devel-debuginfoUpgrade gtk3-develUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-session-debuginfoUpgrade gnome-calculatorUpgrade vino-debugsourceUpgrade gnome-session-debugsourceUpgrade gnome-control-centerUpgrade accountsserviceUpgrade gtk3-tests-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-online-accounts-debuginfoUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-top-iconsUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-autoarUpgrade LibRaw-debugsourceUpgrade gnome-settings-daemonUpgrade gnome-session-wayland-sessionUpgrade mutter-debuginfo | Nov 10, 2021 | Mar 17, 2021 |
| Debian | — | Upgrade gnome-autoar | Jul 30, 2024 | Mar 17, 2021 |
| Gentoo Linux | — | Upgrade app-arch/gnome-autoar. | May 28, 2021 | Mar 17, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gnome-autoar | May 18, 2021 | Mar 17, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/gnome-autoar to version 0.3.1-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Mar 17, 2021 |
| Oracle_linux | — | Upgrade webkit2gtk3-develUpgrade gdmUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-autoarUpgrade webkit2gtk3Upgrade gnome-online-accounts-develUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-systemMonitorUpgrade gtk3-immodule-ximUpgrade accountsservice-develUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-window-listUpgrade gnome-software-develUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-workspace-indicatorUpgrade LibRawUpgrade mutter-develUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-panel-favoritesUpgrade webkit2gtk3-jscUpgrade gnome-shellUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-softwareUpgrade mutterUpgrade gtk3Upgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-apps-menuUpgrade gnome-settings-daemonUpgrade webkit2gtk3-jsc-develUpgrade accountsservice-libsUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-updates-dialogUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-session-xsessionUpgrade gnome-control-centerUpgrade LibRaw-develUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-no-hot-cornerUpgrade gtk3-develUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-commonUpgrade gnome-session-wayland-sessionUpgrade gnome-calculatorUpgrade accountsserviceUpgrade gnome-sessionUpgrade vinoUpgrade gnome-online-accountsUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-desktop-icons | Nov 17, 2021 | Mar 1, 2021 |
| Redhat_linux | — | Upgrade webkit2gtk3-jscUpgrade LibRaw-samples-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-calculatorUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-drive-menuUpgrade gtk-update-icon-cache-debuginfoUpgrade mutter-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-online-accounts-debugsourceUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-window-grouperUpgrade webkit2gtk3-debugsourceUpgrade gtk3-develUpgrade accountsservice-libsUpgrade gtk3-tests-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-session-debuginfoUpgrade gnome-calculator-debugsourceUpgrade gnome-online-accountsUpgrade gnome-session-xsessionUpgrade gnome-settings-daemonUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shellUpgrade gdm-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade LibRaw-develUpgrade gnome-calculator-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade vino-debuginfoUpgrade gnome-classic-sessionUpgrade gtk3-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade gdmUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-commonUpgrade gnome-autoarUpgrade gnome-shell-debugsourceUpgrade accountsservice-debuginfoUpgrade gnome-online-accounts-develUpgrade vino-debugsourceUpgrade gtk3Upgrade gtk3-debugsourceUpgrade gnome-shell-extension-desktop-iconsUpgrade gtk-update-icon-cacheUpgrade LibRaw-debugsourceUpgrade vinoUpgrade gsettings-desktop-schemasUpgrade gnome-software-debugsourceUpgrade gnome-session-debugsourceUpgrade gnome-control-center-debugsourceUpgrade accountsserviceUpgrade accountsservice-develUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-online-accounts-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade webkit2gtk3Upgrade gtk3-immodule-ximUpgrade mutter-develUpgrade gnome-shell-extension-top-iconsUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-software-develUpgrade webkit2gtk3-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-control-centerUpgrade mutterUpgrade gnome-session-kiosk-sessionUpgrade gnome-sessionUpgrade gnome-autoar-debugsourceUpgrade gtk3-devel-debuginfoUpgrade mutter-debugsourceUpgrade gnome-shell-extension-systemMonitorUpgrade accountsservice-libs-debuginfoUpgrade accountsservice-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-softwareUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-gesture-inhibitorUpgrade LibRaw-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade mutter-tests-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade LibRawUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-control-center-debuginfoUpgrade gdm-debuginfo | Nov 10, 2021 | Mar 17, 2021 |
| Rocky_linux | — | Upgrade gnome-softwareUpgrade accountsservice-libs-debuginfoUpgrade gnome-control-centerUpgrade mutter-debugsourceUpgrade webkit2gtk3-develUpgrade gnome-control-center-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gtk3-develUpgrade gnome-software-debuginfoUpgrade mutter-develUpgrade gnome-autoar-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-online-accountsUpgrade webkit2gtk3-jscUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-session-kiosk-sessionUpgrade webkit2gtk3-jsc-develUpgrade gnome-session-debuginfoUpgrade gnome-autoar-debugsourceUpgrade gnome-calculator-debugsourceUpgrade LibRaw-develUpgrade gnome-control-center-debugsourceUpgrade gnome-settings-daemon-debuginfoUpgrade accountsservice-debuginfoUpgrade gdmUpgrade gnome-autoarUpgrade gnome-software-develUpgrade gtk-update-icon-cache-debuginfoUpgrade mutterUpgrade gdm-debugsourceUpgrade vinoUpgrade accountsservice-debugsourceUpgrade vino-debuginfoUpgrade gtk3-debuginfoUpgrade LibRawUpgrade gnome-shell-debugsourceUpgrade webkit2gtk3-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk3-debugsourceUpgrade accountsservice-develUpgrade gsettings-desktop-schemas-develUpgrade gnome-settings-daemonUpgrade webkit2gtk3-debugsourceUpgrade gnome-calculator-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gtk3-devel-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade accountsserviceUpgrade gnome-software-debugsourceUpgrade LibRaw-debuginfoUpgrade LibRaw-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3Upgrade gnome-online-accounts-debugsourceUpgrade gnome-shell-debuginfoUpgrade vino-debugsourceUpgrade gnome-online-accounts-develUpgrade gnome-calculatorUpgrade gtk3Upgrade gnome-session-debugsourceUpgrade gdm-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-sessionUpgrade gnome-session-xsessionUpgrade gtk3-immodule-ximUpgrade accountsservice-libsUpgrade gnome-shellUpgrade gtk-update-icon-cacheUpgrade mutter-debuginfo | Mar 12, 2024 | Mar 17, 2021 |
| Suse | — | Upgrade gnome-autoar-develUpgrade typelib-1_0-gnomeautoargtk-0_1Upgrade libgnome-autoar-0-0Upgrade libgnome-autoar-gtk-0-0Upgrade typelib-1_0-gnomeautoar-0_1 | Oct 26, 2022 | Mar 17, 2021 |
| Ubuntu | — | Upgrade libgnome-autoar-0-0Upgrade libgnome-autoar-gtk-0-0 | May 7, 2021 | Mar 17, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub