{"affected":[{"ecosystem_specific":{"binaries":[{"gnome-autoar-devel":"0.2.3-lp152.4.3.1","libgnome-autoar-0-0":"0.2.3-lp152.4.3.1","libgnome-autoar-gtk-0-0":"0.2.3-lp152.4.3.1","typelib-1_0-GnomeAutoar-0_1":"0.2.3-lp152.4.3.1","typelib-1_0-GnomeAutoarGtk-0_1":"0.2.3-lp152.4.3.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.2","name":"gnome-autoar","purl":"purl:rpm/suse/gnome-autoar&distro=openSUSE%20Leap%2015.2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.2.3-lp152.4.3.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for gnome-autoar fixes the following issues:\n\n- CVE-2020-36241: Skip problematic files that might be extracted outside of the\n  destination dir to prevent potential directory traversal (bsc#1181930).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","id":"openSUSE-SU-2021:0390-1","modified":"2021-03-06T05:05:23Z","published":"2021-03-06T05:05:23Z","references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CYPCMBEG7F5HYZ6RXTSOZ7RTGRUXLCS2/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1181930"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-36241"}],"related":["CVE-2020-36241"],"summary":"Security update for gnome-autoar"}