UbuntuUpdates.org

Package "libgnome-desktop-3-17"

Name: libgnome-desktop-3-17

Description:

Utility library for loading .desktop files - runtime files
Latest version: 3.28.2-0ubuntu1.3
Release: bionic (18.04)
Level: security
Repository: main
Head package: gnome-desktop3

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libgnome-desktop-3-17"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libgnome-desktop-3-17" in Bionic

Repository Area Version
updates main 3.28.2-0ubuntu1.5

Changelog

Version: 3.28.2-0ubuntu1.3 2019-05-27 13:06:21 UTC

  gnome-desktop3 (3.28.2-0ubuntu1.3) bionic-security; urgency=medium

  * SECURITY UPDATE: thumbnailer sandbox escape via TIOCSTI
    - debian/patches/CVE-2019-11460.patch: fix incomplete TIOCSTI filtering
      in libgnome-desktop/gnome-desktop-thumbnail-script.c.
    - CVE-2019-11460

 -- Marc Deslauriers <email address hidden> Thu, 23 May 2019 12:48:25 -0400
Source diff to previous version
CVE-2019-11460 An issue was discovered in GNOME gnome-desktop 3.26, 3.28, and 3.30 prior to 3.30.2.2, and 3.32 prior to 3.32.1.1. A compromised thumbnailer may esca

Version: 3.28.2-0ubuntu1.2 2018-12-18 07:06:24 UTC

  gnome-desktop3 (3.28.2-0ubuntu1.2) bionic-security; urgency=medium

  * Cherry-pick thumbnail-Handle-non-usrmerged-systems.patch:
    - Fix thumbnailer on 32-bit systems where /lib64 is not available. This
      fixes a regression introduced in the previous update. (LP: #1807127)

 -- Jeremy Bicha <email address hidden> Tue, 11 Dec 2018 10:19:39 -0500
Source diff to previous version
1807127 Fixing bug #1795668 breaks thumbnail creation on 32-bit Ubuntu

Version: 3.28.2-0ubuntu1.1 2018-11-28 23:07:04 UTC

  gnome-desktop3 (3.28.2-0ubuntu1.1) bionic-security; urgency=medium

  * Enable bubblewrap hardening for thumnbailers (LP: #1795668)

 -- Jeremy Bicha <email address hidden> Tue, 02 Oct 2018 10:26:01 -0400
1795668 Enable bubblewrap in gnome-desktop3 for Ubuntu 18.04 LTS


About   -   Send Feedback to @ubuntu_updates