- Vulnerability/
- USN-4332-1
20/4/2020
USN-4332-1: File Roller vulnerability
First published: Mon Apr 20 2020(Updated: )
It was discovered that File Roller incorrectly handled symlinks. An attacker could possibly use this issue to expose sensitive information.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/file-roller | <3.32.2-1ubuntu0.1 | 3.32.2-1ubuntu0.1 |
| =19.10 | ||
| All of | ||
| ubuntu/file-roller | <3.28.0-1ubuntu1.2 | 3.28.0-1ubuntu1.2 |
| =18.04 | ||
| All of | ||
| ubuntu/file-roller | <3.16.5-0ubuntu1.4 | 3.16.5-0ubuntu1.4 |
| =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2020-11736
- https://ubuntu.com/security/notices/USN-4332-2
- https://launchpad.net/ubuntu/+source/file-roller/3.32.2-1ubuntu0.1
- https://launchpad.net/ubuntu/+source/file-roller/3.28.0-1ubuntu1.2
- https://launchpad.net/ubuntu/+source/file-roller/3.16.5-0ubuntu1.4
- https://ubuntu.com/security/notices/USN-4332-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is USN-4332-1.
What software is affected by this vulnerability?
The File Roller software is affected by this vulnerability.
What is the severity of this vulnerability?
The severity of this vulnerability is not specified in the information provided.
How can an attacker exploit this vulnerability?
An attacker could exploit this vulnerability by using File Roller incorrectly handling symlinks to expose sensitive information.
How can I fix this vulnerability?
To fix this vulnerability, update the File Roller software to version 3.32.2-1ubuntu0.1 or later.
- agent/type
- agent/references
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- collector/usn
- source/Ubuntu
- anchor-related/USN-4332-2
- agent/software-canonical-lookup
- agent/event
- agent/description
- agent/title
- agent/tags
- agent/trending
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/19.10
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04