*** This bug is a security vulnerability *** Public security bug reported:
Impact ====== gnome-desktop 3.26 hardened the thumbnailers with bubblewrap to mitigate several vulnerabilities. Ubuntu had to disable that feature until bubblewrap could be promoted to main. bubblewrap is now in main for 18.10 and the feature is now enabled there. The intention has been for that change to be backported to 18.04 LTS as a security fix. The bubblewrap MIR is https://launchpad.net/bugs/1709164 We'll need to promote bubblewrap to main before this update should be pushed to bionic. Can you sponsor directly from the git repo instead of with a debdiff? gbp clone https://git.launchpad.net/~ubuntu-desktop/ubuntu/+source /gnome-desktop3 ** Affects: gnome-desktop3 (Ubuntu) Importance: Undecided Status: Confirmed ** Tags: bionic ** Changed in: gnome-desktop3 (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-desktop3 in Ubuntu. https://bugs.launchpad.net/bugs/1795668 Title: Enable bubblewrap in gnome-desktop3 for Ubuntu 18.04 LTS Status in gnome-desktop3 package in Ubuntu: Confirmed Bug description: Impact ====== gnome-desktop 3.26 hardened the thumbnailers with bubblewrap to mitigate several vulnerabilities. Ubuntu had to disable that feature until bubblewrap could be promoted to main. bubblewrap is now in main for 18.10 and the feature is now enabled there. The intention has been for that change to be backported to 18.04 LTS as a security fix. The bubblewrap MIR is https://launchpad.net/bugs/1709164 We'll need to promote bubblewrap to main before this update should be pushed to bionic. Can you sponsor directly from the git repo instead of with a debdiff? gbp clone https://git.launchpad.net/~ubuntu-desktop/ubuntu/+source /gnome-desktop3 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-desktop3/+bug/1795668/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
