Here's a debdiff which, when applied, builds fine on my system. It's applicable to 1.1.3-1.
** Patch added: "1.1.3-1-to-1.1.3-1ubuntu1-1.debdiff" https://bugs.launchpad.net/ubuntu/+source/xdg-utils/+bug/1779529/+attachment/5158303/+files/1.1.3-1-to-1.1.3-1ubuntu1-1.debdiff -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to xdg-utils in Ubuntu. https://bugs.launchpad.net/bugs/1779529 Title: Please merge 1.1.3-1 from Debian Sid Status in xdg-utils package in Ubuntu: In Progress Bug description: There's a new upstream release available in Debian. Let's merge it. Changelog entries since the last merge: xdg-utils (1.1.3-1) unstable; urgency=medium * New upstream release. - Avoid argument injection vulnerability in open_envvar. Fixes CVE-2017-18266, closes: #898317. * Remove 01-open-lxqt.patch applied by upstream. * Fix word expansion on KDE in xdg-email. Closes: #898999. * Bump debhelper and standards version, no modifications for this. -- Nicholas Guriev <guriev...@ya.ru> Sun, 20 May 2018 01:18:48 +0300 xdg-utils (1.1.2-2) unstable; urgency=medium * Update Vcs for salsa.debian.org. * 01-open-lxqt.patch: Fix support in LXQt, which isn't the same as LXDE. Closes: #884436. -- Emilio Pozuelo Monfort <po...@debian.org> Tue, 27 Feb 2018 10:25:43 +0100 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/xdg-utils/+bug/1779529/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
