Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <f8dba5904e172d3fb259bac24b259b2b@free.fr>
Date: Wed, 20 May 2026 12:27:20 +0200
From: gabriel.corona@...e.fr
To: oss-security@...ts.openwall.com
Subject: Re: PCManFM-Qt allows arbitrary files to be opened via
 the org.freedesktop.FileManager1.ShowFolders method

> But it's probably possible to reach a similar o.fd.FileManager1 call 
> from sandboxed code indirectly, by asking the OpenURI portal to open a 
> directory, which will try to dispatch it to a file manager.

If that is the case, PCManFM is certainly equally impacted by the 
sandbox escape scenario.

Regards,

Gabriel

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.