GNOME File Roller: Directory traversal

GNOME File Roller: Directory traversal A vulnerability in GNOME File Roller could lead to a directory traversal attack. file-roller 2020-09-13 2020-09-13 717362 local, remote 3.36.3 3.36.3

File Roller is an archive manager for the GNOME desktop environment.

It was discovered that GNOME File Roller incorrectly handled symlinks.

Please review the referenced CVE identifiers for details.

There is no known workaround at this time.

All GNOME File Roller users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=app-arch/file-roller-3.36.3"

CVE-2020-11736 whissi whissi