Summary
It was discovered that GLib created directories and files without properly
restricting permissions. An attacker could possibly use this issue to access
sensitive information.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | glib2.0 | 2.48.2-0ubuntu4.3 |
| Ubuntu · 18.04 LTS 18.04:LTS | glib2.0 | 2.56.4-0ubuntu0.18.04.4 |
Vulnerabilities 1
-
Unscored —
The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_…
References
-
report
https://ubuntu.com/security/CVE-2019-13012