USN-3650-1: xdg-utils vulnerability

Reference Links

• https://ubuntu.com/security/CVE-2017-18266
• https://launchpad.net/ubuntu/+source/xdg-utils/1.1.2-1ubuntu2.2
• https://launchpad.net/ubuntu/+source/xdg-utils/1.1.1-1ubuntu3.2
• https://launchpad.net/ubuntu/+source/xdg-utils/1.1.1-1ubuntu1.16.04.3
• https://launchpad.net/ubuntu/+source/xdg-utils/1.1.0~rc1-2ubuntu7.2
• https://ubuntu.com/security/notices/USN-3650-1 (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

• CVE-2017-18266

Frequently Asked Questions

• What is the severity of USN-3650-1?

  The severity of USN-3650-1 is high.

• How does xdg-utils vulnerability (USN-3650-1) work?

  The xdg-utils vulnerability (USN-3650-1) allows an attacker to execute arbitrary code by exploiting certain inputs.

• Which versions of xdg-utils are affected by USN-3650-1?

  Versions 1.1.2-1ubuntu2.2, 1.1.1-1ubuntu3.2, 1.1.1-1ubuntu1.16.04.3, and 1.1.0~rc1-2ubuntu7.2 of xdg-utils are affected by USN-3650-1.

• How do I fix the xdg-utils vulnerability (USN-3650-1)?

  To fix the xdg-utils vulnerability (USN-3650-1), update xdg-utils to the corresponding fixed version provided by Ubuntu.

• Where can I find more information about the xdg-utils vulnerability (USN-3650-1)?

  You can find more information about the xdg-utils vulnerability (USN-3650-1) on the Ubuntu Security Advisory page and the Launchpad pages for the respective xdg-utils versions.