File Roller
Approved changes feed: RSS · Atom
cpe:2.3:a:gnome:file-roller:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5) |
|---|---|
| Product | File Roller (705067ac-f811-5cc1-8be2-3763dc37174c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/file-roller |
purl2cpe | 2026-06-01 10:17:24.193830 |
pkg:deb/ubuntu/file-roller |
purl2cpe | 2026-06-01 10:17:24.193834 |
pkg:github/gnome/file-roller |
purl2cpe | 2026-06-01 10:17:24.193837 |
pkg:rpm/centos/file-roller |
purl2cpe | 2026-06-01 10:17:24.193840 |
pkg:rpm/fedora/file-roller |
purl2cpe | 2026-06-01 10:17:24.193843 |
pkg:rpm/opensuse/file-roller |
purl2cpe | 2026-06-01 10:17:24.193846 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-36314 |
vulnerable | 2026-06-08 05:25:02.945848 |
Details available
fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-11736.
Published: 2021-04-07T11:07:40.000Z
Updated: 2024-08-04T17:23:09.845Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11736 |
vulnerable | 2026-06-08 05:17:54.232804 |
Details available
fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.
Published: 2020-04-13T18:39:26.000Z
Updated: 2024-08-04T11:41:58.820Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16680 |
vulnerable | 2026-06-08 05:13:09.229563 |
Details available
An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename contained in a TAR archive, possibly overwriting a file during extraction.
Published: 2019-09-21T20:33:21.000Z
Updated: 2024-08-05T01:17:41.208Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.