A vulnerability has been discovered in Nautilus, which can lead to a denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| gnome-base/nautilus | * | < 44.0 | >= 44.0 |
Default file manager for the GNOME desktop
Please review the CVE identifier referenced below for details.
GNOME Nautilus allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive.
There is no known workaround at this time.
All Nautilus users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=gnome-base/nautilus-44.0"
A vulnerability in Nautilus may allow attackers to escape the sandbox.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| gnome-base/nautilus | * | < 3.30.5-r1 | >= 3.30.5-r1 |
Default file manager for the GNOME desktop
A vulnerability was discovered in Nautilus which allows an attacker to escape the sandbox.
A local attacker could possibly bypass sandbox protection.
There is no known workaround at this time.
All Nautilus users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=gnome-base/nautilus-3.30.5-r1"