UbuntuUpdates.org

Package "file-roller"

Name: file-roller

Description:

archive manager for GNOME
Latest version: 3.10.2.1-0ubuntu4.2
Release: trusty (14.04)
Level: updates
Repository: main
Homepage: http://fileroller.sourceforge.net/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "file-roller"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "file-roller" in Trusty

Repository Area Version
base main 3.10.2.1-0ubuntu4
security main 3.10.2.1-0ubuntu4.2

Changelog

Version: 3.10.2.1-0ubuntu4.2 2016-09-09 00:06:33 UTC

  file-roller (3.10.2.1-0ubuntu4.2) trusty-security; urgency=medium

  * SECURITY UPDATE: Path traversal flaw allows arbitrary file deletion via
    malicious archive (LP: #1171236)
    - debian/patches/CVE-2016-7162.patch: Do not follow symlinks when deleting
      a folder recursively. Based on upstream patch.
    - CVE-2016-7162

 -- Tyler Hicks <email address hidden> Thu, 08 Sep 2016 09:17:49 -0500
Source diff to previous version
1171236 file-roller may delete the content of linked folder (?)
CVE-2016-7162 RESERVED

Version: 3.10.2.1-0ubuntu4.1 2014-07-22 16:06:34 UTC

  file-roller (3.10.2.1-0ubuntu4.1) trusty-proposed; urgency=medium

  * debian/patches/git_nautilus_extension_unref.patch:
    - Stop nautilus crashing due to a missing unref in the file roller
      extension (LP: #1333606)
 -- Robert Ancell <email address hidden> Fri, 11 Jul 2014 19:44:25 +1200
1333606 Disconnecting a server during a transfer causes nautilus to crash when reconnecting to that server


About   -   Send Feedback to @ubuntu_updates