|
|
Log in / Subscribe / Register

A remote code execution vulnerability in GNOME

A remote code execution vulnerability in GNOME

Posted Oct 10, 2023 15:29 UTC (Tue) by tjeb (guest, #127466)
Parent article: A remote code execution vulnerability in GNOME

Just tested it out on a Debian Bookworm system, and I do see the crash so it's likely to be vulnerable too. I've added '*.cue' to /org/freedesktop/tracker/miner/files/ignored-files in dconf-editor as a temporary mitigation.

to post comments

A remote code execution vulnerability in GNOME

Posted Oct 10, 2023 17:16 UTC (Tue) by Tobu (subscriber, #24111) [Link]

My incantation is: 
printf '[Desktop Entry]\nType=Application\nHidden=true\n' > ~/.config/autostart/tracker-miner-fs-3.desktop
systemctl --user mask --now tracker-miner-fs-3.service
There is also a gsettings key (gsettings get org.freedesktop.Tracker3.Miner.Files ignored-files) but I don't know that the cue parser would only come up for this extension.


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds