This bug was fixed in the package xdg-utils - 1.1.3-4.1ubuntu1 --------------- xdg-utils (1.1.3-4.1ubuntu1) jammy-proposed; urgency=low
* SECURITY REGRESSION: simple-scan email functionality break - debian/patches/CVE-2020-27748.patch: was reverted/delete in scripts/xdg-email.in. * Sync with Debian. Remaining change: - Add debian/xdg-utils.links: + Symlink /usr/bin/xdg-open to /usr/bin/browse (LP: #1624022) xdg-utils (1.1.3-4.1) unstable; urgency=medium * Non-maintainer upload. * Simplified handling for ttyon and ttyoff, with thanks to Nicolas Boulenguez <nico...@debian.org>. (closes: 981422) xdg-utils (1.1.3-4) unstable; urgency=medium * Set executable bit of the "ttyon" and the "ttyoff" utilities right before running tests, not in the "patch" target of debian/rules. This fixes architecture independent build with "dpkg-buildpackage -A". xdg-utils (1.1.3-3) unstable; urgency=medium [ Debian Janitor ] * Remove obsolete field Name from debian/upstream/metadata (already present in machine-readable debian/copyright). [ Reuben Thomas ] * xdg-screensaver: fix suspending using window without a WM_NAME property Closes: #970203, Upstream: #98. [ KARBOWSKI Piotr ] * xdg-open: Exit also on non-zero exit status from 'Exec' .desktop entry. Upstream: !13. [ Nicholas Guriev ] * t-xdg-open.sh: Fix quoting issues. Closes: #975228, Upstream: !32. * xdg-open: Open terminal window in generic mode if .desktop file requires so Closes: #964877, Upstream: #84. * desktop_file_to_binary: fix "unexpected operator" bug. Closes: #809877, Upstream: #182. * Remove Per Olofsson from Uploaders list. Thank you for your previous work! Closes: #847164. * Link to /usr/bin/open through alternatives mechanism. LP: #342584. * New autopkgtests with Bash and Dash. * Bump Standards-Version to 4.5.1, no required changes. -- Ken VanDine <ken.vand...@canonical.com> Fri, 19 Nov 2021 20:43:54 +0000 ** Changed in: xdg-utils (Ubuntu) Status: Confirmed => Fix Released ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-27748 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to xdg-utils in Ubuntu. https://bugs.launchpad.net/bugs/342584 Title: 'open' should be a link to 'xdg-open' Status in xdg-utils package in Ubuntu: Fix Released Bug description: Binary package hint: xdg-utils Currently, /bin/open is taken by the kbd package. However, I filed a bug on that package seeing if that symlink (to /bin/openvt) could be released. As it is, /usr/bin/open -> /usr/bin/xdg-open seems a much more logical choice. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/xdg-utils/+bug/342584/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp