| 2019-04-18 16:49:25 |
Tom Reynolds |
bug |
|
|
added bug |
| 2019-04-18 18:53:14 |
Tom Reynolds |
bug |
|
|
added subscriber Mike Salvatore |
| 2019-04-18 18:53:43 |
Tom Reynolds |
information type |
Public |
Public Security |
|
| 2019-04-18 18:57:10 |
Tom Reynolds |
gnome-shell-extension-desktop-icons (Ubuntu): status |
New |
Confirmed |
|
| 2019-04-18 19:33:56 |
Tom Reynolds |
bug watch added |
|
https://gitlab.gnome.org/World/ShellExtensions/desktop-icons/issues/111 |
|
| 2019-04-18 19:33:56 |
Tom Reynolds |
bug task added |
|
gnome-shell-extension-desktop-icons |
|
| 2019-04-18 20:14:43 |
Sebastien Bacher |
gnome-shell-extension-desktop-icons (Ubuntu): importance |
Undecided |
High |
|
| 2019-04-18 20:15:01 |
Sebastien Bacher |
gnome-shell-extension-desktop-icons (Ubuntu): assignee |
|
Iain Lane (laney) |
|
| 2019-04-18 20:15:20 |
Sebastien Bacher |
tags |
amd64 apport-bug disco |
amd64 apport-bug disco rls-dd-incoming |
|
| 2019-04-18 20:15:42 |
Sebastien Bacher |
tags |
amd64 apport-bug disco rls-dd-incoming |
amd64 apport-bug disco |
|
| 2019-04-18 21:00:16 |
Bug Watch Updater |
gnome-shell-extension-desktop-icons: status |
Unknown |
New |
|
| 2019-04-24 00:27:56 |
Bug Watch Updater |
gnome-shell-extension-desktop-icons: status |
New |
Fix Released |
|
| 2019-04-26 19:49:42 |
Tom Reynolds |
bug |
|
|
added subscriber Ubuntu-discuss Bug team |
| 2019-05-15 14:02:38 |
Iain Lane |
description |
Attempting to open a Desktop folder named "aaa'bbb" (without double quotes) using the "Open in Terminal" option from the context menu produces a notification message stating:
Execution of "x-terminal-emulator --working-directory=/home/...
Text ended before matching quote was found for '. (The text was "x-terminal-emulator --working-directory=/home/x/Desktop/aaa'bbb")
This suggests improper escaping (possible security impact with command injection).
Steps to reproduce:
1. On the Ubuntu 19.04.0 amd64 Desktop, right-click, and select "New folder"
2. Enter the following folder name and press Enter: aaa'bbb
3. Right-click on the newly created folder icon
4. Select "Open in Terminal"
5. The above notification pops up, no terminal window opens.
The expected outcome would be:
5. A terminal window opens in directory ~/Desktop/aaa'bbb
ProblemType: Bug
DistroRelease: Ubuntu 19.04
Package: gnome-shell-extension-desktop-icons 19.01.1-1
ProcVersionSignature: Ubuntu 5.0.0-13.14-generic 5.0.6
Uname: Linux 5.0.0-13-generic x86_64
ApportVersion: 2.20.10-0ubuntu27
Architecture: amd64
CurrentDesktop: ubuntu:GNOME
Date: Thu Apr 18 18:40:28 2019
InstallationDate: Installed on 2019-04-14 (4 days ago)
InstallationMedia: Ubuntu 19.04 "Disco Dingo" - Alpha amd64 (20190413.2)
PackageArchitecture: all
SourcePackage: gnome-shell-extension-desktop-icons
UpgradeStatus: No upgrade log present (probably fresh install) |
[ Description ]
Attempting to open a Desktop folder named "aaa'bbb" (without double quotes) using the "Open in Terminal" option from the context menu produces a notification message stating:
Execution of "x-terminal-emulator --working-directory=/home/...
Text ended before matching quote was found for '. (The text was "x-terminal-emulator --working-directory=/home/x/Desktop/aaa'bbb")
This suggests improper escaping (possible security impact with command injection).
[ QA ]
Steps to reproduce:
1. On the Ubuntu 19.04.0 amd64 Desktop, right-click, and select "New folder"
2. Enter the following folder name and press Enter: aaa'bbb
3. Right-click on the newly created folder icon
4. Select "Open in Terminal"
5. The above notification pops up, no terminal window opens.
The expected outcome would be:
5. A terminal window opens in directory ~/Desktop/aaa'bbb
[ Regression potential ]
See bug #1829244
[ ... ]
ProblemType: Bug
DistroRelease: Ubuntu 19.04
Package: gnome-shell-extension-desktop-icons 19.01.1-1
ProcVersionSignature: Ubuntu 5.0.0-13.14-generic 5.0.6
Uname: Linux 5.0.0-13-generic x86_64
ApportVersion: 2.20.10-0ubuntu27
Architecture: amd64
CurrentDesktop: ubuntu:GNOME
Date: Thu Apr 18 18:40:28 2019
InstallationDate: Installed on 2019-04-14 (4 days ago)
InstallationMedia: Ubuntu 19.04 "Disco Dingo" - Alpha amd64 (20190413.2)
PackageArchitecture: all
SourcePackage: gnome-shell-extension-desktop-icons
UpgradeStatus: No upgrade log present (probably fresh install) |
|
| 2019-05-15 14:03:12 |
Iain Lane |
nominated for series |
|
Ubuntu Disco |
|
| 2019-05-15 14:03:12 |
Iain Lane |
bug task added |
|
gnome-shell-extension-desktop-icons (Ubuntu Disco) |
|
| 2019-05-15 14:03:18 |
Iain Lane |
gnome-shell-extension-desktop-icons (Ubuntu): status |
Confirmed |
Fix Released |
|
| 2019-05-15 14:03:22 |
Iain Lane |
gnome-shell-extension-desktop-icons (Ubuntu Disco): status |
New |
In Progress |
|
| 2019-05-15 14:03:24 |
Iain Lane |
gnome-shell-extension-desktop-icons (Ubuntu Disco): assignee |
|
Iain Lane (laney) |
|
| 2019-05-21 18:13:05 |
Brian Murray |
gnome-shell-extension-desktop-icons (Ubuntu Disco): status |
In Progress |
Fix Committed |
|
| 2019-05-21 18:13:08 |
Brian Murray |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2019-05-21 18:13:12 |
Brian Murray |
bug |
|
|
added subscriber SRU Verification |
| 2019-05-21 18:13:18 |
Brian Murray |
tags |
amd64 apport-bug disco |
amd64 apport-bug disco verification-needed verification-needed-disco |
|
| 2019-05-21 21:32:44 |
Tom Reynolds |
tags |
amd64 apport-bug disco verification-needed verification-needed-disco |
amd64 apport-bug disco verification-done verification-done-disco |
|
| 2019-05-30 03:07:20 |
Mathew Hodson |
gnome-shell-extension-desktop-icons (Ubuntu Disco): importance |
Undecided |
High |
|
| 2019-05-30 08:18:07 |
Launchpad Janitor |
gnome-shell-extension-desktop-icons (Ubuntu Disco): status |
Fix Committed |
Fix Released |
|
| 2019-05-30 08:18:15 |
Łukasz Zemczak |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
