UbuntuUpdates.org

Package "gnome-exe-thumbnailer"

Name: gnome-exe-thumbnailer

Description:

Wine .exe and other executable thumbnailer for GNOME
Latest version: 0.9.3-2ubuntu0.16.04.1
Release: xenial (16.04)
Level: security
Repository: universe
Homepage: http://wiki.winehq.org/exe-thumbnailer

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "gnome-exe-thumbnailer"

All arch deb package
APT INSTALL

Other versions of "gnome-exe-thumbnailer" in Xenial

Repository Area Version
base universe 0.9.3-2
updates universe 0.9.3-2ubuntu0.16.04.1

Changelog

Version: 0.9.3-2ubuntu0.16.04.1 2017-08-04 02:06:44 UTC

  gnome-exe-thumbnailer (0.9.3-2ubuntu0.16.04.1) xenial-security; urgency=medium

  [ James Lu ]
  * SECURITY UPDATE: Arbitrary code execution (LP: #651610)
    - debian/patches/switch-to-msiinfo.patch: Switch to msitools' msiinfo for
      ProductVersion fetching, replacing the insecure VBScript-based parsing
    - debian/control: Add msitools to recommends; it is now used to fetch .msi
      version info.
    - CVE-2017-11421

 -- Tyler Hicks <email address hidden> Fri, 04 Aug 2017 00:05:54 +0000
651610 [CVE-2017-11421] Version number for .msi thumbnail is obtained from unreliable source
CVE-2017-1142 IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure


About   -   Send Feedback to @ubuntu_updates