Red Hat Security AdvisoryRHSA-2018:0842
xdg-user-dirs security and bug fix update
Released 2018-04-10 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) xdg-user-dirs-0.15-5.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) xdg-user-dirs-0.15-5.el7
- Red Hat Enterprise Linux Server (v. 7) xdg-user-dirs-0.15-5.el7
- Red Hat Enterprise Linux Workstation (v. 7) xdg-user-dirs-0.15-5.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) xdg-user-dirs-0.15-5.el7
Fixes 1 record
Priority LOW 34
It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00321 · Published 2018-01-09 · Partial fix · 0.15-5 CWE-284
