Vulnerability Bulletins |
DSA-4537 file-roller - security update |
|
| Affected software | Debian |
|
It was discovered that file-roller, an archive manager for GNOME, doesnot properly handle the extraction of archives with a single ./../ in afile path. An attacker able to provide a specially crafted archive forprocessing can take advantage of this flaw to overwrite files if a useris dragging a specific file or map to a location to extract to. More info: https://www.debian.org/security/2019/dsa-4537 |
|