CVE-2017-15131 – gnome-session: Xsession creation of XDG user directories does not honor system umask policy

https://notcve.org/view.php?id=CVE-2017-15131

09 Jan 2018 — It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This only affects xdg-user-dirs before 0.15.5 as shipped with Red Hat Enterprise Linux. Se ha descubierto que no se respeta la política system umask cuando se crean directorios de usuarios XDG, ya que Xsession obtiene xdg-user-dirs.sh antes de establecer la política umask. Esto solo afecta a xdg-user-dirs en versiones anteriores a la 0.15.5, tal ... • https://access.redhat.com/errata/RHSA-2018:0842 • CWE-266: Incorrect Privilege Assignment CWE-276: Incorrect Default Permissions CWE-284: Improper Access Control •