This bug was fixed in the package gsettings-desktop-schemas -
45~rc-1ubuntu1
---------------
gsettings-desktop-schemas (45~rc-1ubuntu1) mantic; urgency=medium
* Merge with Debian. Remaining changes:
- Add ubuntu_lock-on-suspend.patch
- Add dark-theme migration script using dh-migrations
* Drop Breaks: ukwm because ukwm still runs but fails to build from source
for unrelated reasons
gsettings-desktop-schemas (45~rc-1) unstable; urgency=medium
* New upstream release
- media-handling: Don't autostart software by default when media is inserted
(LP: #1983778, LP: #1617620)
* Add Breaks against packages that used dropped toggle-shaded
* Drop obsolete Breaks
gsettings-desktop-schemas (44.0-2) unstable; urgency=medium
* Update standards version to 4.6.2, no changes needed
* Release to unstable
-- Jeremy Bícha <[email protected]> Thu, 07 Sep 2023 13:24:00 -0400
** Changed in: gsettings-desktop-schemas (Ubuntu)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gsettings-desktop-schemas in Ubuntu.
https://bugs.launchpad.net/bugs/1983778
Title:
Major security issue in Ubuntu Desktop default config - Removable
Media
Status in GSettings Desktop Schemas:
Fix Released
Status in gsettings-desktop-schemas package in Ubuntu:
Fix Released
Bug description:
There is a MAJOR SECURITY VULNERABILITY in Ubuntu Desktop since
release 18.04 !
Recently I used Ubuntu 22.04 LTS and noticed that the issue still
exist!
I don’t know the reason for it, but default values for “Removable Media” are
VERY Risky!
It will automatically run the software which is attached to the removable
media.
Why? Why has Ubuntu still didn’t disable that option?
The following is the default configuration (the “bad” configuration):
https://imgur.com/XXXQlV2
The following is the configuration which Ubuntu should be having (it is the
fix to the problem):
https://imgur.com/a/0JeM6ve
Please change the default configurations for Ubuntu!
To manage notifications about this bug go to:
https://bugs.launchpad.net/gsettings-desktop-schemas/+bug/1983778/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp