Changeset 600ea420 for xsoft/other/xdg-utils.xml

Timestamp:

02/12/2024 11:58:40 PM (4 months ago)

Author:

Bruce Dubbs <bdubbs@…>

Branches:

12.1, ken/TL2024, lazarus, trunk, xry111/llvm18

Children:

89c7c42a, 9e51948

Parents:

a7b74d67

Message:

Remove warning that is no longer valid

File:

• xsoft/other/xdg-utils.xml (modified) (1 diff)

xsoft/other/xdg-utils.xml

@@ -32 +32 @@
       It is required for Linux Standards Base (LSB) conformance.
     </para>
-
-    <warning>
-      <para>
-        A security vulnerability exists in all versions of
-        <application>xdg-utils</application> from version 1.1.0rc1 when handling
-        mailto: URIs. An attacker could potentially send a victim a URI that
-        automatically attaches a sensitive file to a new email. If a victim user
-        does not notice that an attachment was added and sends the email, this
-        could result in sensitive information disclosure.
-      </para>
-
-      <para>
-        To mitigate this flaw, either do not use mailto links at all, or always
-        double-check in the user interface that there are no unwanted attachments
-        before sending emails, especially when the email originates from clicking
-        on a mailto link.
-      </para>
-    </warning>
 
     &lfs120_checked;