2.6-maintenance : lp:~trebelnik-stefina/cinnamon-test/+git/xreader : Git : Code : Cinnamon testing

Get this branch:: git clone -b 2.6-maintenance https://git.launchpad.net/~trebelnik-stefina/cinnamon-test/+git/xreader

Branch information

a30a932... by Clement Lefebvre <email address hidden> on 2023-12-19

2.6.5

comics: Use unarr for rar support when using libarchive 3.4.

comics: Use libarchive to unpack documents [CVE-2023-44452].

This commit eliminates the use of external commands for opening
comic documents, and uses libarchive instead.

Fixes:
CVE-2023-44452 - Linux Mint Xreader CBT File Parsing Argument
Injection Remote Code Execution Vulnerability.

This vulnerability was discovered by:
Febin Mon Saji working with Trend Micro Zero Day Initiative

epub: Prevent path traversal when extracting files [CVE-2023-44451]

Test each file's resolved path against the temporary directory
before extracting.

Fixes:
CVE-2023-44451 - Linux Mint Xreader EPUB File Parsing Directory
Traversal Remote Code Execution Vulnerability.

This vulnerability was discovered by:
Febin Mon Saji working with Trend Micro Zero Day Initiative

dvi: Don't manually escape the exported filename.

Use g_shell_escape on the filename, as manually escaping can
allow command injection attacks.

2d47afa... by Clement Lefebvre <email address hidden> on 2020-06-24

2.6.4

66ca7dd... by Clement Lefebvre <email address hidden> on 2020-06-24

Fix app version

f9c5d45... by Clement Lefebvre <email address hidden> on 2020-06-24

2.6.3

1e58551... by Clement Lefebvre <email address hidden> on 2020-06-24

l10n: Update translations

81da389... by Clement Lefebvre <email address hidden> on 2020-06-21

Thumbnailer: add application/vnd.comicbook-rar

»