Уязвимость CVE-2021-32563: Информация
Описание
An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2. When called with a regular file as a command-line argument, it delegates to a different program (based on the file type) without user confirmation. This could be used to achieve code execution.
Важность: CRITICAL (9,8) Вектор: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Исправленные пакеты
Имя пакета | Ветка | Исправлено в версии | Версия в репозитории | Errata ID | № Задания | Состояние |
|---|---|---|---|---|---|---|
| thunar | sisyphus | 4.16.8-alt1 | 4.18.10-alt1 | ALT-PU-2021-1789-1 | 271618 | Исправлено |
| thunar | p10 | 4.16.8-alt1 | 4.18.10-alt1 | ALT-PU-2021-1789-1 | 271618 | Исправлено |
| thunar | p9 | 1.8.17-alt1 | 1.8.17-alt1 | ALT-PU-2021-1810-1 | 271820 | Исправлено |
| thunar | c10f1 | 4.16.8-alt1 | 4.16.11-alt3 | ALT-PU-2021-1789-1 | 271618 | Исправлено |