Bug#862571: pcmanfm: single instance socket may be blocked by another user.

2017-05-15 Thread Salvatore Bonaccorso
Control: retitle -1 pcmanfm: CVE-2017-8934: single instance socket may be blocked by another user This issue has been assigned CVE-2017-8934. Regards, Salvatore

Bug#862571: pcmanfm: single instance socket may be blocked by another user.

2017-05-15 Thread Salvatore Bonaccorso
Hi I requested a CVE for this issue via cveform.mitre.org Regards, Salvatore

Bug#862571: pcmanfm: single instance socket may be blocked by another user.

2017-05-14 Thread Andriy Grytsenko
Package: pcmanfm Version: 1.2.5-2 Version: 1.2.3-1.1 Severity: serious Tags: upstream security The socket placed in /tmp is predictable and public-writable. Therefore if one user placed a symlink to another socket instead of socket for another user then said another user will either be unable to u