UbuntuUpdates.org

Package "file-roller"

Name: file-roller

Description:

archive manager for GNOME
Latest version: 3.10.2.1-0ubuntu4.2
Release: trusty (14.04)
Level: security
Repository: main
Homepage: http://fileroller.sourceforge.net/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "file-roller"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "file-roller" in Trusty

Repository Area Version
base main 3.10.2.1-0ubuntu4
updates main 3.10.2.1-0ubuntu4.2

Changelog

Version: 3.10.2.1-0ubuntu4.2 2016-09-08 22:06:28 UTC

  file-roller (3.10.2.1-0ubuntu4.2) trusty-security; urgency=medium

  * SECURITY UPDATE: Path traversal flaw allows arbitrary file deletion via
    malicious archive (LP: #1171236)
    - debian/patches/CVE-2016-7162.patch: Do not follow symlinks when deleting
      a folder recursively. Based on upstream patch.
    - CVE-2016-7162

 -- Tyler Hicks <email address hidden> Thu, 08 Sep 2016 09:17:49 -0500
1171236 file-roller may delete the content of linked folder (?)
CVE-2016-7162 RESERVED


About   -   Send Feedback to @ubuntu_updates