file-roller 3.36.1-1ubuntu0.1 source package in Ubuntu


file-roller (3.36.1-1ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Directory traversal
    - debian/patches/CVE-2020-11736.patch: do not follow external
      links when extracting files in src/fr-archive-libarchive.c.
    - CVE-2020-11736

 -- <email address hidden> (Leonidas S. Barbosa)  Mon, 27 Apr 2020 09:22:51 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa on 2020-04-27
Uploaded to:
Original maintainer:
Ubuntu Developers
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal security on 2020-04-27 main gnome


File Size SHA-256 Checksum
file-roller_3.36.1.orig.tar.xz 840.3 KiB 70a5e551dd07c299df03fcda00c2251c5d1d3e239f3ed711b8bbaaa75897425c
file-roller_3.36.1-1ubuntu0.1.debian.tar.xz 14.9 KiB 1068651e90bcd908340da12012a62ce757be0fec9258b14238fe6515d1cdbd4a
file-roller_3.36.1-1ubuntu0.1.dsc 2.3 KiB fd1def6a164cbf8affd9818d3fc1a425d9f7c74e0622ff1f16346aa2e16f247f

View changes file

Binary packages built by this source

file-roller: archive manager for GNOME

 File-roller is an archive manager for the GNOME environment. It allows you to:
  * Create and modify archives.
  * View the content of an archive.
  * View a file contained in an archive.
  * Extract files from the archive.
 File-roller supports the following formats:
  * Tar (.tar) archives, including those compressed with
    gzip (.tar.gz, .tgz), bzip (, .tbz), bzip2 (.tar.bz2, .tbz2),
    compress (.tar.Z, .taz), lzip (.tar.lz, .tlz), lzop (.tar.lzo, .tzo),
    lzma (.tar.lzma) and xz (.tar.xz)
  * Zip archives (.zip)
  * Jar archives (.jar, .ear, .war)
  * 7z archives (.7z)
  * iso9660 CD images (.iso)
  * Lha archives (.lzh)
  * Archiver archives (.ar)
  * Comic book archives (.cbz)
  * Single files compressed with gzip (.gz), bzip (.bz), bzip2 (.bz2),
    compress (.Z), lzip (.lz), lzop (.lzo), lzma (.lzma) and xz (.xz)
 File-roller can extract following formats:
  * Cabinet archives (.cab)
  * Debian binary packages (.deb)
  * Xar archives (.xar)
 File-roller doesn't perform archive operations by itself, but relies on
 standard tools for this.

file-roller-dbgsym: debug symbols for file-roller