Re: today's high-publicity security issue

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]




----- Original Message -----
> On Fri, 2016-12-16 at 12:18 -0500, Matthew Miller wrote:
> > Can someone confirm that this update at least mitigates the issue
> > highlighted in the blog?
> 
> The blog post indicates that it also targets the totem thumbnailer and
> totem itself, so no, improving tracker is not sufficient here.

The thumbnailer is "sandboxed" (or at least limited) through SELinux, since
Fedora 21:
https://docs.fedoraproject.org/en-US/Fedora/21/html/SELinux_Users_and_Administrators_Guide/sect-thumbnail_protection.html

As for the apps, when do we start shipping Flatpak'ed applications?
_______________________________________________
desktop mailing list -- desktop@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to desktop-leave@xxxxxxxxxxxxxxxxxxxxxxx




[Index of Archives]     [Fedora Users]     [Fedora KDE]     [Fedora Announce]     [Fedora Docs]     [Fedora Config]     [PAM]     [Red Hat Development]     [Red Hat 9]     [Gimp]     [Yosemite News]

  Powered by Linux