Gnome Autoar

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:gnome:gnome-autoar:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5)
ProductGnome Autoar (4b368371-5b29-5163-aa90-2c1d6607ec7d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gnome-autoar purl2cpe 2026-06-01 10:17:20.454824
pkg:deb/ubuntu/gnome-autoar purl2cpe 2026-06-01 10:17:20.454827
pkg:github/gnome/gnome-autoar purl2cpe 2026-06-01 10:17:20.454830
pkg:rpm/fedora/gnome-autoar purl2cpe 2026-06-01 10:17:20.454833
pkg:rpm/opensuse/gnome-autoar purl2cpe 2026-06-01 10:17:20.454836

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28650 vulnerable 2026-06-08 05:31:24.686740 Details available
autoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-36241.
Published: 2021-03-17T05:51:33.000Z
Updated: 2024-08-03T21:47:33.025Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36241 vulnerable 2026-06-08 05:25:02.881376 Details available
autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.
Published: 2021-02-05T07:11:07.000Z
Updated: 2024-08-04T17:23:09.861Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.