[Bug 1405794] [NEW] /usr/share/backgrounds/Water_web_by_Tom_Kijas.jpg has executable permissions set by default.

Fri, 26 Dec 2014 07:21:02 -0800 

*** This bug is a security vulnerability ***

Public security bug reported:

/usr/share/backgrounds/Water_web_by_Tom_Kijas.jpg has executable
permissions set by default. This file is part of the ubuntu-wallpapers-
trusty_14.04.0.1-0ubuntu1_all package.

Clearly as a background image/desktop wallpaper this file should not
have executable privileges. I have checked the file with ClamTk  5.10
which reports no problems.

I'm flagging this as a security bug because jpg files can be used as an
attack vector. But it's likely just a mistake in the packaging of the
file.

** Affects: ubuntu-wallpapers (Ubuntu)
     Importance: Undecided
         Status: New

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1405794

Title:
  /usr/share/backgrounds/Water_web_by_Tom_Kijas.jpg has executable
  permissions set by default.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-wallpapers/+bug/1405794/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to