https://bugs.kde.org/show_bug.cgi?id=374572
Bug ID: 374572
Summary: Ark runs shell scripts when assiociated applications
are used
Product: ark
Version: 16.08.3
Platform: openSUSE RPMs
OS: Linux
Status: UNCONFIRMED
Severity: major
Priority: NOR
Component: general
Assignee: elvis.angelac...@kde.org
Reporter: fab...@ritter-vogt.de
CC: rthoms...@gmail.com
Target Milestone: ---
Created attachment 103204
--> https://bugs.kde.org/attachment.cgi?id=103204&action=edit
Gzipped tar for demonstration
When an archive includes an executable shell script and the user chose to open
files in their associated applications, clicking on those scripts runs them.
As there is no indication (except the small icon in some cases) of the file
being executable, this is highly misleading and even dangerous.
The attachment shows the issue, the LICENSE file gets executed when opening it.
--
You are receiving this mail because:
You are watching all bug changes.
