-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2019-d2c1368294 2019-10-03 00:34:09.156136 --------------------------------------------------------------------------------
Name : cinnamon Product : Fedora EPEL 7 Version : 3.6.7 Release : 5.el7 URL : https://github.com/linuxmint/cinnamon Summary : Window management and application launching for GNOME Description : Cinnamon is a Linux desktop which provides advanced innovative features and a traditional user experience.
The desktop layout is similar to Gnome 2. The underlying technology is forked from Gnome Shell. The emphasis is put on making users feel at home and providing them with an easy to use and comfortable desktop experience.
-------------------------------------------------------------------------------- Update Information:
A flaw was found in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-users.py GUI runs as root and allows configuration of (for example) other users' icon files in _on_face_browse_menuitem_activated and _on_face_menuitem_activated. These icon files are written to the respective user's $HOME/.face location. If an unprivileged user prepares a symlink pointing to an arbitrary location, then this location will be overwritten with the icon content. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1598495 - CVE-2018-13054 cinnamon: privilege escalation in cinnamon-settings-users.py GUI [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1598495 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update cinnamon' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7%5C /html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
epel-package-announce@lists.fedoraproject.org