desktop-packages team mailing list archive
-
desktop-packages team
-
Mailing list archive
-
Message #90877
[Bug 1405794] [NEW] /usr/share/backgrounds/Water_web_by_Tom_Kijas.jpg has executable permissions set by default.
*** This bug is a security vulnerability ***
Public security bug reported:
/usr/share/backgrounds/Water_web_by_Tom_Kijas.jpg has executable
permissions set by default. This file is part of the ubuntu-wallpapers-
trusty_14.04.0.1-0ubuntu1_all package.
Clearly as a background image/desktop wallpaper this file should not
have executable privileges. I have checked the file with ClamTk 5.10
which reports no problems.
I'm flagging this as a security bug because jpg files can be used as an
attack vector. But it's likely just a mistake in the packaging of the
file.
** Affects: ubuntu-wallpapers (Ubuntu)
Importance: Undecided
Status: New
** Information type changed from Private Security to Public Security
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to ubuntu-wallpapers in Ubuntu.
https://bugs.launchpad.net/bugs/1405794
Title:
/usr/share/backgrounds/Water_web_by_Tom_Kijas.jpg has executable
permissions set by default.
Status in ubuntu-wallpapers package in Ubuntu:
New
Bug description:
/usr/share/backgrounds/Water_web_by_Tom_Kijas.jpg has executable
permissions set by default. This file is part of the ubuntu-
wallpapers-trusty_14.04.0.1-0ubuntu1_all package.
Clearly as a background image/desktop wallpaper this file should not
have executable privileges. I have checked the file with ClamTk 5.10
which reports no problems.
I'm flagging this as a security bug because jpg files can be used as
an attack vector. But it's likely just a mistake in the packaging of
the file.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-wallpapers/+bug/1405794/+subscriptions
Follow ups
References