Package "xdg-utils"

Name: xdg-utils


desktop integration utilities from freedesktop.org

Latest version: 1.1.0~rc1-2ubuntu7.2
Release: trusty (14.04)
Level: security
Repository: main
Homepage: http://portland.freedesktop.org/


Download "xdg-utils"

Other versions of "xdg-utils" in Trusty

Repository Area Version
base main 1.1.0~rc1-2ubuntu7
updates main 1.1.0~rc1-2ubuntu7.2


Version: 1.1.0~rc1-2ubuntu7.2 2018-05-21 19:06:50 UTC

  xdg-utils (1.1.0~rc1-2ubuntu7.2) trusty-security; urgency=medium

  * SECURITY UPDATE: Argument-injection attack
    - debian/patches/CVE-2017-18266.patch: fix in xdg-open.
    - CVE-2017-18266

 -- <email address hidden> (Leonidas S. Barbosa) Fri, 18 May 2018 09:40:44 -0300

CVE-2017-18266 The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER enviro

About   -   Send Feedback to @ubuntu_updates