Lucene search

K
suseSuseOPENSUSE-SU-2018:1596-1
HistoryJun 08, 2018 - 12:12 a.m.

Security update for xdg-utils (important)

2018-06-0800:12:56
lists.opensuse.org
42

0.008 Low

EPSS

Percentile

79.2%

This update for xdg-utils fixes this security issues:

  • CVE-2017-18266: The open_envvar function in xdg-open did not validate
    strings launching the program specified by the BROWSER environment
    variable, which might allowed remote attackers to conduct
    argument-injection attacks via a crafted URL (bsc#1093086).
OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.0noarchxdg-utils< 20170508-lp150.3.3.2xdg-utils-20170508-lp150.3.3.2.noarch.rpm