This bug was fixed in the package gsettings-desktop-schemas -
45~rc-1ubuntu1

---------------
gsettings-desktop-schemas (45~rc-1ubuntu1) mantic; urgency=medium

  * Merge with Debian. Remaining changes:
    - Add ubuntu_lock-on-suspend.patch
    - Add dark-theme migration script using dh-migrations
  * Drop Breaks: ukwm because ukwm still runs but fails to build from source
    for unrelated reasons

gsettings-desktop-schemas (45~rc-1) unstable; urgency=medium

  * New upstream release
    - media-handling: Don't autostart software by default when media is inserted
      (LP: #1983778, LP: #1617620)
  * Add Breaks against packages that used dropped toggle-shaded
  * Drop obsolete Breaks

gsettings-desktop-schemas (44.0-2) unstable; urgency=medium

  * Update standards version to 4.6.2, no changes needed
  * Release to unstable

 -- Jeremy Bícha <jbi...@ubuntu.com>  Thu, 07 Sep 2023 13:24:00 -0400

** Changed in: gsettings-desktop-schemas (Ubuntu)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to gsettings-desktop-schemas
in Ubuntu.
https://bugs.launchpad.net/bugs/1983778

Title:
  Major security issue in Ubuntu Desktop default config - Removable
  Media

Status in GSettings Desktop Schemas:
  Fix Released
Status in gsettings-desktop-schemas package in Ubuntu:
  Fix Released

Bug description:
  There is a MAJOR SECURITY VULNERABILITY in Ubuntu Desktop since
  release 18.04 !

  Recently I used Ubuntu 22.04 LTS and noticed that the issue still
  exist!

  
  I don’t know the reason for it, but default values for “Removable Media” are 
VERY Risky!
  It will automatically run the software which is attached to the removable 
media.
  Why? Why has Ubuntu still didn’t disable that option?

  
  The following is the default configuration (the “bad” configuration):
  https://imgur.com/XXXQlV2

  The following is the configuration which Ubuntu should be having (it is the 
fix to the problem):
  https://imgur.com/a/0JeM6ve

  Please change the default configurations for Ubuntu!

To manage notifications about this bug go to:
https://bugs.launchpad.net/gsettings-desktop-schemas/+bug/1983778/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to