ALT-PU-2022-6246-1
Package nautilus updated to version 42.5-alt1 for branch sisyphus_riscv64.
Closed vulnerabilities
Published: 2022-11-14
Modified: 2025-05-01
Modified: 2025-05-01
CVE-2022-37290
GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive.
Severity: MEDIUM (5.5)
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References:
- https://gitlab.gnome.org/GNOME/nautilus/-/issues/2376
- https://gitlab.gnome.org/GNOME/nautilus/-/merge_requests/1001
- https://gitlab.gnome.org/GNOME/nautilus/-/tree/master
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PX5CVF4FAHFA6UNKHFBBLOP2NUMIQJAY/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYPDZ7LBBUVU3WFK7DCGDFGK2GXTKGT5/
- https://gitlab.gnome.org/GNOME/nautilus/-/issues/2376
- https://gitlab.gnome.org/GNOME/nautilus/-/merge_requests/1001
- https://gitlab.gnome.org/GNOME/nautilus/-/tree/master
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PX5CVF4FAHFA6UNKHFBBLOP2NUMIQJAY/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYPDZ7LBBUVU3WFK7DCGDFGK2GXTKGT5/