GCVE-110-MAGEIA-2021-274

Advisory Published

Vulnetix · Advisory published June 23, 2021

gnome-autoar: directory traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations (CVE-2021-28650). Also the previous update (Bug 28454) introduced a regression, fixed here.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	gnome-autoar	0.3.1-1.mga8 (unaffected), 0 (affected)	—
Mageia	gnome-autoar	0 (affected), 0.3.1-1.mga7 (unaffected)	—

Aliases

CVE-2021-28650

References

Updated gnome-autoar packages fix a security vulnerability

advisory

Updated gnome-autoar packages fix a security vulnerability

advisory

Updated gnome-autoar packages fix a security vulnerability

issue

Updated gnome-autoar packages fix a security vulnerability

issue

Updated gnome-autoar packages fix a security vulnerability

issue

Browse GCVE Records

74,581 records in the GCVE database · Updated July 24, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON