Debian/file-roller: medium 4.3
An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename contained in a TAR archive, possibly overwriting a file during extraction.
Action: Upgrade file-roller to 3.30.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.30.0-1 | - |
Fixed versions
| 3.30.0-1 |
Sources
published · modified · JSON