Scientific Linux alert SLSA-2018:0842-1 (xdg-user-dirs)

From:
    	     
 
Scott Reid <svreid@fnal.gov> 
To:
    	     
 
<scientific-linux-errata@listserv.fnal.gov> 
Subject:
    	     
 
Security ERRATA Low: xdg-user-dirs on SL7.x x86_64 
Date:
    	     
 
Mon, 30 Apr 2018 18:36:20 +0000
Message-ID:
    	     
 
<20180430183620.26096.61533@slpackages.fnal.gov>
Synopsis:          Low: xdg-user-dirs security and bug fix update
Advisory ID:       SLSA-2018:0842-1
Issue Date:        2018-04-10
CVE Numbers:       CVE-2017-15131
--

Security Fix(es):

* xdg-user-dirs, gnome-session: Xsession creation of XDG user directories
does not honor system umask policy (CVE-2017-15131)

Additional Changes:
--

SL7
  x86_64
    xdg-user-dirs-0.15-5.el7.x86_64.rpm
    xdg-user-dirs-debuginfo-0.15-5.el7.x86_64.rpm

- Scientific Linux Development Team