Directory traversal vulnerability in File Roller 3.6.x before 3.6.4 3.8.x before 3.8.3 and 3.9.x before 3.9.3 when libarchive is used allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a \Keep directory structure\ action related to fr-archive-libarchive.c and fr-window.c.