| Package | Affected versions | Patched versions |
|---|---|---|
| file roller | ≥ 3.6.0, < 3.6.4≥ 3.8.0, < 3.8.3≥ 3.9.1, < 3.9.3 | 3.6.43.8.33.9.3 |
Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to fr-archive-libarchive.c and fr-window.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free