this post was submitted on 09 Oct 2023
47 points (100.0% liked)

Arch Linux

7759 readers
2 users here now

The beloved lightweight distro

founded 4 years ago
MODERATORS
k_o_t@lemmy.ml
47
Gnome 45 is here (archlinux.org)
submitted 1 year ago* (last edited 1 year ago) by infeeeee@lemm.ee to c/archlinux@lemmy.ml
26 comments fedilink hide all child comments
 

Can you count your broken extensions?

Official guide for extension maintainers: https://gjs.guide/extensions/upgrading/gnome-shell-45.html

you are viewing a single comment's thread
view the rest of the comments
[–] reddit_sux@lemmy.world 6 points 1 year ago (1 children)

Gnome users beware and upgrade libcue.

https://lemmy.ndlug.org/post/270908

[–] redw0rm@kerala.party 4 points 1 year ago* (last edited 1 year ago)

Since that post was'nt available for me atm, just reposting relevant Github blog : 1-Click RCE on GNOME

The TL;DR

libcue is a library used for parsing cue sheets—a metadata format for describing the layout of the tracks on a CD. it’s used by tracker-miners: an application that’s included with GNOME.The index is automatically updated when you add or modify a file in certain subdirectories of your home directory, in particular including ~/Downloads. To make a long story short, that means that inadvertently clicking a malicious link is all it takes for an attacker to exploit CVE-2023-43641 and get code execution on your computer.