- Vulnerability/
- USN-4332-2
USN-4332-2: File Roller vulnerability
First published: Mon Apr 27 2020(Updated: )
USN-4332-1 fixed vulnerabilities in File Roller. This update provides the corresponding update for Ubuntu 20.04 LTS. Original advisory details: It was discovered that File Roller incorrectly handled symlinks. An attacker could possibly use this issue to expose sensitive information.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/file-roller | <3.36.1-1ubuntu0.1 | 3.36.1-1ubuntu0.1 |
| =20.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this advisory?
The vulnerability ID of this advisory is USN-4332-2.
What is the title of this advisory?
The title of this advisory is 'USN-4332-2: File Roller vulnerability'.
What software is affected by this vulnerability?
The File Roller software with version 3.36.1-1ubuntu0.1 is affected.
How can this vulnerability be exploited?
An attacker could exploit this vulnerability by using symlinks to expose sensitive information.
How can I fix this vulnerability?
You can fix this vulnerability by updating File Roller to version 3.36.1-1ubuntu0.1 or later.
- agent/references
- agent/type
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- collector/usn
- source/Ubuntu
- anchor-related/USN-4332-1
- agent/software-canonical-lookup
- agent/event
- agent/tags
- agent/description
- agent/title
- agent/trending
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/20.04