CVE-2016-7162: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only
• File Roller Project File Roller: version 3.5.4 only; version 3.6.0 only; version 3.6.1 only; version 3.6.1.1 only; version 3.6.2 only; version 3.6.3 only; …

Published 2016-09-26. Last modified 2026-06-17.