| Package | Affected versions | Patched versions |
|---|---|---|
| file roller | = 3.10= 3.15= 3.20= 3.20.1= 3.20.2= 3.5.4= 3.6.0= 3.6.1= 3.6.1.1= 3.6.2= 3.6.3= 3.6.4= 3.8.0= 3.8.1= 3.8.2= 3.8.3= 3.9.0= 3.9.1= 3.9.2= 3.9.3 |
The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free