https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 20:37:01 +0000 https://vulnerability.circl.lu/vuln/cve-2020-36241 <p>autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file&#39;s parent is a symlink to a directory outside of the intended extraction location.</p> <p>autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file&#39;s parent is a symlink to a directory outside of the intended extraction location.</p> https://vulnerability.circl.lu/vuln/cve-2020-36241 https://vulnerability.circl.lu/vuln/usn-4733-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: gnome-autoar, Ubuntu:20.04:LTS: gnome-autoar</p> <p>Yiğit Can Yılmaz discovered that GNOME Autoar could extract files outside of the intended directory. If a user were tricked into extracting a specially crafted archive, a remote attacker could create files in arbitrary locations, possibly leading to code execution.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: gnome-autoar, Ubuntu:20.04:LTS: gnome-autoar</p> <p>Yiğit Can Yılmaz discovered that GNOME Autoar could extract files outside of the intended directory. If a user were tricked into extracting a specially crafted archive, a remote attacker could create files in arbitrary locations, possibly leading to code execution.</p> https://vulnerability.circl.lu/vuln/usn-4733-1