Summary
The xdg-utils package is a set of simple scripts that provide basic desktop integration functions for any Free Desktop.
Security Fix(es):
* xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments (CVE-2022-4055)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 9 | xdg-utils | 0:1.1.3-13.el9_6 |
Vulnerabilities 1
-
High 7.4
When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional head…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2143792