Unrated
An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename contained in a TAR archive, possib...
CVE-2019-16680
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2019-16680 file-roller Fixed in: 3.30.0-1
Original description The description as published by the source.
References
- advisory bugzilla.redhat.com
- advisory lists.debian.org
- advisory seclists.org
- advisory usn.ubuntu.com
- advisory debian.org
- patch gitlab.gnome.org
- patch gitlab.gnome.org
- report bugzilla.gnome.org