UbuntuUpdates.org

Package "xdg-utils"

Name: xdg-utils

Description:

desktop integration utilities from freedesktop.org
Latest version: 1.1.0~rc1-2ubuntu7.2
Release: trusty (14.04)
Level: security
Repository: main
Homepage: http://portland.freedesktop.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "xdg-utils"

All arch deb package
APT INSTALL

Other versions of "xdg-utils" in Trusty

Repository Area Version
base main 1.1.0~rc1-2ubuntu7
updates main 1.1.0~rc1-2ubuntu7.2

Changelog

Version: 1.1.0~rc1-2ubuntu7.2 2018-05-21 19:06:50 UTC

  xdg-utils (1.1.0~rc1-2ubuntu7.2) trusty-security; urgency=medium

  * SECURITY UPDATE: Argument-injection attack
    - debian/patches/CVE-2017-18266.patch: fix in xdg-open.
    - CVE-2017-18266

 -- <email address hidden> (Leonidas S. Barbosa) Fri, 18 May 2018 09:40:44 -0300
CVE-2017-18266 The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER enviro


About   -   Send Feedback to @ubuntu_updates