Security update for file-roller

This vulnerability in file-roller arises from unbounded string copying of file paths during progress-line parsing when handling 7z and RAR archives. Specifically, if an archive contains a file entry with an excessively long path, the path is copied into a fixed-size stack buffer without size checks, triggering a stack buffer overflow. This results in file-roller terminating unexpectedly, causing a denial of service. Exploitation requires a victim to open or extract a crafted archive using file-roller. The vulnerability is identified as CWE-120. Red Hat Enterprise Linux 6 is affected. The vulnerability has a CVSS v3.1 base score of 6.5 (medium severity) with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or integrity impact, and high availability impact. No known exploits in the wild have been reported. Red Hat advises avoiding opening or extracting untrusted 7z or RAR archives with file-roller until an updated package is available.

Successful exploitation leads to denial of service by crashing file-roller when processing malicious archives with overly long file paths. There is no confidentiality or integrity impact reported. Arbitrary code execution is considered difficult on hardened Red Hat systems. The primary impact is availability loss due to application termination.

Red Hat recommends avoiding opening or extracting untrusted 7z or RAR archives with file-roller until an updated package is installed. Patch status is not yet confirmed; check the Red Hat advisory for updates on fixes. No official fix or patch link is currently provided. Users should exercise caution and restrict use of file-roller with untrusted archives to mitigate risk.