Bugzilla – Bug 997822
VUL-0: CVE-2016-7162: file-roller: File Roller path traversal
Last modified: 2020-05-19 19:25:21 UTC
Created attachment 691333 [details] PoC CVE-2016-7162 File Roller 3.5.4 through 3.20.2 was affected by a path traversal bug that could result in deleted files if a user were tricked into opening a malicious archive. 3.20.3 news: http://ftp.gnome.org/mirror/gnome.org/sources/file-roller/3.20/file-roller-3.20.3.news 3.21.90 news: http://ftp.gnome.org/mirror/gnome.org/sources/file-roller/3.21/file-roller-3.21.90.news Distro bug: https://launchpad.net/bugs/1171236 Upstream bug: https://bugzilla.gnome.org/show_bug.cgi?id=698554 Introduced by: https://git.gnome.org/browse/file-roller/commit/?id=34b64f3a897c4b4e8e180c028f326bc921eb08ec Fixed by: https://git.gnome.org/browse/file-roller/commit/?id=f70be1f41688859ec8dbe266df35a1839ceb96c5 = Setup = Create /dev/shm/will-be-emptied/important.txt which will act as an important file that we wouldn't want to lose. $ mkdir -p /dev/shm/will-be-emptied/ $ echo data > /dev/shm/will-be-emptied/important.txt = Test = 1. Open the attached links.tar with File Roller $ file-roller links.tar 2. Double-click either of the "absolute" or "relative" files 3. Close the opened Nautilus window as well as the File Roller window 4. Check to see if /dev/shm/will-be-emptied/important.txt has been unintentionally deleted References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7162 http://seclists.org/oss-sec/2016/q3/440
So we are in the green with SLED SP2 and Leap 42.2 (Tw too ofc). That means we need to backport the commit to 13.2 and 42.1. The diff is nice and small, so I suspect it will be a clean backport. Any volunteers?
bugbot adjusting priority
This is an autogenerated message for OBS integration: This bug (997822) was mentioned in https://build.opensuse.org/request/show/425941 13.2+42.1 / file-roller
openSUSE-SU-2016:2338-1: An update that fixes one vulnerability is now available. Category: security (moderate) Bug References: 997822 CVE References: CVE-2016-7162 Sources used: openSUSE Leap 42.1 (src): file-roller-3.16.5-7.2 openSUSE 13.2 (src): file-roller-3.14.2-7.2
fixed