[ GLSA 201908-27 ] Nautilus

[GLSA]

Gentoo Linux Security Advisory

Title: Nautilus: Security bypass (GLSA 201908-27)
Severity: normal
Exploitable: local
Date: 2019-08-31
Bug(s): #692784
ID: 201908-27

Synopsis

A vulnerability in Nautilus may allow attackers to escape the
sandbox.


Background

Default file manager for the GNOME desktop

Affected Packages

Package: gnome-base/nautilus
Vulnerable: < 3.30.5-r1
Unaffected: >= 3.30.5-r1
Architectures: All supported architectures


Description

A vulnerability was discovered in Nautilus which allows an attacker to
escape the sandbox.


Impact

A local attacker could possibly bypass sandbox protection.

Workaround

There is no known workaround at this time.

Resolution

All Nautilus users should upgrade to the latest version: