oss-sec mailing list archives

Re: CVE-2015-0854: Insecure use of system() in shutter

From: Mark Felder <feld () feld me>
Date: Thu, 17 Sep 2015 11:08:35 -0500



On Sun, Sep 13, 2015, at 11:31, Luke Faraone wrote:


This bug has existed since (at least) 0.85.1, and although a patch is
available a fixed version has not been released.


The xdg functions were not introduced until 0.80, so that is the oldest
affected version.



-- 
  Mark Felder
  feld () feld me

CVE-2015-0854: Insecure use of system() in shutter Luke Faraone (Sep 13)
- Re: CVE-2015-0854: Insecure use of system() in shutter Mark Felder (Sep 17)