Comment 0 for bug 2040045
Revision history for this message
| fossfreedom (fossfreedom) wrote Screenshot could propagate arbitary image data between multiple users | #0 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
1b1ed1a
(Get the code!)
Analysis by upstream for budgie-desktop has noted that the use of /tmp to pass screenshot images could allow another user sharing the same machine to craft an image that would potentially propagate on another users session.
This has been resolved by not using an accessible folder location such as /tmp to pass data. Instead a user-space location is used which is not accessible to other users.