Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2016:2338-1

Опубликовано: 19 сент. 2016
Источник: suse-cvrf

Описание

Security update for file-roller

This update for file-roller fixes the following issue:

  • CVE-2016-7162: Do not follow symlinks when deleting a folder recursively. (boo#997822, bgo#698554)

Список пакетов

openSUSE Leap 42.1
file-roller-3.16.5-7.2
file-roller-lang-3.16.5-7.2
nautilus-file-roller-3.16.5-7.2

Ссылки

Описание

The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.

Затронутые продукты
openSUSE Leap 42.1:file-roller-3.16.5-7.2
openSUSE Leap 42.1:file-roller-lang-3.16.5-7.2
openSUSE Leap 42.1:nautilus-file-roller-3.16.5-7.2
Ссылки