3.2-maintenance : lp:~trebelnik-stefina/cinnamon-test/+git/xreader : Git : Code : Cinnamon testing

Get this branch:: git clone -b 3.2-maintenance https://git.launchpad.net/~trebelnik-stefina/cinnamon-test/+git/xreader

Branch information

87ee944... by Clement Lefebvre <email address hidden> on 2023-12-18

3.2.3

comics: Use unarr for rar support when using libarchive 3.4.

comics: Use libarchive to unpack documents [CVE-2023-44452].

This commit eliminates the use of external commands for opening
comic documents, and uses libarchive instead.

Fixes:
CVE-2023-44452 - Linux Mint Xreader CBT File Parsing Argument
Injection Remote Code Execution Vulnerability.

This vulnerability was discovered by:
Febin Mon Saji working with Trend Micro Zero Day Initiative

epub: Prevent path traversal when extracting files [CVE-2023-44451]

Test each file's resolved path against the temporary directory
before extracting.

Fixes:
CVE-2023-44451 - Linux Mint Xreader EPUB File Parsing Directory
Traversal Remote Code Execution Vulnerability.

This vulnerability was discovered by:
Febin Mon Saji working with Trend Micro Zero Day Initiative

dvi: Don't manually escape the exported filename.

Use g_shell_escape on the filename, as manually escaping can
allow command injection attacks.

93d2696... by Clement Lefebvre <email address hidden> on 2021-12-06

3.2.2

2ca702a... by Clement Lefebvre <email address hidden> on 2021-12-06

l10n: Update translations

e8c9c5c... by Clement Lefebvre <email address hidden> on 2021-11-29

3.2.1

e58dfe5... by Clement Lefebvre <email address hidden> on 2021-11-24

Gsettings: Remove state schema reference

314341a... by Clement Lefebvre <email address hidden> on 2021-11-23

3.2.0

»