Debian/accountsservice: unknown
The user_change_icon_file_authorized_cb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does not properly check the UID when copying an icon file to the system cache director
Action: Upgrade accountsservice to 0.6.21-6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.21-6 | - |
Fixed versions
| 0.6.21-6 |
Sources
- osv: DEBIAN-CVE-2012-2737#Debian:14/accountsservice
- https://security-tracker.debian.org/tracker/CVE-2012-2737
published · modified · JSON