vulnerability

Debian: CVE-2020-36314: file-roller -- security update

Severity
3
CVSS
(AV:L/AC:H/Au:N/C:N/I:P/A:P)
Published
04/07/2021
Added
07/30/2024
Modified
07/30/2024

Description

fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-11736.

Solution

debian-upgrade-file-roller
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.