Summary
It was discovered that gnome-desktop incorrectly confined thumbnailers. If
a user were tricked into downloading a malicious image file, a remote
attacker could possibly combine this issue with another vulnerability to
escape the sandbox and execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | gnome-desktop3 | 3.28.2-0ubuntu1.3 |
Vulnerabilities 1
-
Unscored —
An issue was discovered in GNOME gnome-desktop 3.26, 3.28, and 3.30 prior to 3.30.2.2, and 3.32 prior to 3.32.1.1. A co…
References
-
report
https://ubuntu.com/security/CVE-2019-11460