Ubuntu 20.10 USN-4649-1 Critical: xdg-utils Information Exposure

ubuntu

November 26, 2020

xdg-utils could be made to expose sensitive information.

Summary

xdg-utils could be made to expose sensitive information.

Software Description:

- xdg-utils: desktop integration utilities from freedesktop.org

Details:

Jens Mueller discovered that xdg-utils incorrectly handled certain URI.

An attacker could possibly use this issue to expose sensitive information.

Topics Covered

security advisory critical Ubuntu information exposure xdg-utils

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  xdg-utils                       1.1.3-2ubuntu1.20.10.1

Ubuntu 20.04 LTS:
  xdg-utils                       1.1.3-2ubuntu1.20.04.1

Ubuntu 18.04 LTS:
  xdg-utils                       1.1.2-1ubuntu2.4

Ubuntu 16.04 LTS:
  xdg-utils                       1.1.1-1ubuntu1.16.04.4

In general, a standard system update will make all the necessary changes.