[Portland] Using xdg-open in mailcap causes possible hole in Firefox!
Manuel Reimer
Manuel.Reimer at gmx.de
Tue Jan 6 09:06:27 PST 2009
Hello,
I've created this bug report, some days ago:
https://bugs.freedesktop.org/show_bug.cgi?id=19377
At first: Why don't you hide security bugs for the public? This makes it easy for bad guys, to abuse holes!
Besides Slackware, someone told me, that Fedora also uses xdg-open in their mailcap file. I think it would be a good idea for the portland project, do do something, to tell distributors not to use xdg-open too careless...
Yours
Manuel Reimer
--
() ascii ribbon campaign - against html mail
/\ - gegen HTML-Mail
answers as html mail will be deleted automatically!
Antworten als HTML-Mail werden automatisch gelöscht!
Psssst! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger
More information about the Portland
mailing list