https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T20:36:58.795044+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2020-36241 CVE-2020-36241 2026-09-29T20:36:58.811685+00:00

autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.

 https://vulnerability.circl.lu/vuln/usn-4733-1 USN-4733-1 — gnome-autoar vulnerability 2026-09-29T20:36:58.811783+00:00

Affected: Ubuntu:18.04:LTS: gnome-autoar, Ubuntu:20.04:LTS: gnome-autoar

Yiğit Can Yılmaz discovered that GNOME Autoar could extract files outside of the intended directory. If a user were tricked into extracting a specially crafted archive, a remote attacker could create files in arbitrary locations, possibly leading to code execution.