CVE:CVE-2020-36241
CNNVD:CNNVD-202102-519
Gnome gnome-autoar是Gnome社区的一款为GNOME应用程序提供窗口小部件和gschemas功能的组件。
GNOME gnome-autoar through 0.2.4 存在后置链接漏洞，该漏洞允许在提取过程中遍历目录。
solution:Upgrade gnome gnome-autoar to a higher version than 0.2.4,and avoid the version (,0.2.4]; Upgrade fedoraproject fedora to a higher version than 34,and avoid the version 34