CVE-2017-15131

CVE-2017-15131 affects xdg-user-dirs prior to 0.15.5. Xsession sources xdg-user-dirs.sh before applying the system umask, so created XDG user directories may not honor the intended permissions. This could lead to local users gaining access to others’ files. Remediation: upgrade to xdg-user-dirs 0...