[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

Joshua Peisach 1998060 at bugs.launchpad.net
Thu Jan 5 22:10:32 UTC 2023


Fix released for nautilus 1:43.0-1ubuntu2.1

nautilus (1:43.0-1ubuntu2.1) kinetic-security; urgency=medium

  * SECURITY UPDATE: crash via invalid zip file
    - debian/patches/CVE-2022-37290.patch: fix crash when copying an
      invalid file in src/nautilus-dbus-manager.c,
      src/nautilus-file-operations.c.
    - CVE-2022-37290

 -- Marc Deslauriers <marc.deslauriers at ubuntu.com>  Tue, 03 Jan 2023
12:27:45 -0500

** Changed in: nautilus (Ubuntu Kinetic)
       Status: New => Fix Released

** Changed in: nautilus (Ubuntu Lunar)
       Status: New => Fix Released

** Changed in: nautilus (Ubuntu Jammy)
       Status: New => Fix Released

** Changed in: nautilus (Ubuntu Focal)
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions





More information about the universe-bugs mailing list