*** This bug is a security vulnerability ***

You have been subscribed to a public security bug by Seth Arnold (seth-arnold):

Ubuntu 21.04 hirsute
gedit 3.38.1-1

If a file with extended attributes (xattrs) is edited and saved with
gedit, the xattrs are lost. This problem - as well as the loss of birth
time, reported in
https://bugs.launchpad.net/ubuntu/+source/gedit/+bug/1940758 - seems to
be caused by gedit creating a new file when saving. Compare this with
nano, which does not destroy xattrs.

Steps to reproduce:
1 echo testing > testfile.txt
2 setfattr -n user.test -v "this is my test xattr" testfile.txt
3 getfattr -d testfile.txt
# file: testfile.txt
user.test="this is my test xattr"
4 gedit testfile.txt
make edit and save
5 getfattr -d testfile.txt
no output

This bug also causes a loss of ACLs for the edited file, as they are
stored as extended attributes. Because of this I am marking this bug as
a security vulnerability.

This bug is not limited to gedit; it applies to a number of other text
editors.

** Affects: gedit (Ubuntu)
     Importance: Undecided
         Status: New

-- 
gedit causes loss of extended attributes (xattrs)
https://bugs.launchpad.net/bugs/1942542
You received this bug notification because you are a member of Ubuntu Bugs, 
which is subscribed to the bug report.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to