Updated gnome-autoar packages fix security vulnerability
Publication date: 04 Mar 2021Type: security
Affected Mageia releases : 7 , 8
CVE: CVE-2020-36241
Description
Yiğit Can Yılmaz discovered that GNOME Autoar could extract files outside of the intended directory. If a user were tricked into extracting a specially crafted archive, a remote attacker could create files in arbitrary locations, possibly leading to code execution (CVE-2020-36241).
References
SRPMS
8/core
- gnome-autoar-0.2.4-2.1.mga8
7/core
- gnome-autoar-0.2.3-2.1.mga7