CVE-2019-16680

An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename contained in a TAR archive, possibly overwriting a file during extraction.

Date published : 2019-09-21

https://seclists.org/bugtraq/2019/Sep/57

https://www.debian.org/security/2019/dsa-4537