Approved changes feed: RSS · Atom

cpe:2.3:a:freedesktop:xdg-user-dirs:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFreedesktop (2c544e5d-e68e-5b35-a616-dc08f0ba697e)
ProductXdg User Dirs (c3b3c532-c1fc-5046-ae59-10873b16d8a5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/xdg-user-dirs purl2cpe 2026-06-01 10:14:03.725457
pkg:deb/ubuntu/xdg-user-dirs purl2cpe 2026-06-01 10:14:03.725459
pkg:github/freedesktop/xdg-user-dirs purl2cpe 2026-06-01 10:14:03.725462
pkg:gitlab/redhat/xdg-user-dirs purl2cpe 2026-06-01 10:14:03.725465
pkg:rpm/centos/xdg-user-dirs purl2cpe 2026-06-01 10:14:03.725467
pkg:rpm/fedora/xdg-user-dirs purl2cpe 2026-06-01 10:14:03.725470
pkg:rpm/opensuse/xdg-user-dirs purl2cpe 2026-06-01 10:14:03.725473

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-15131 vulnerable 2026-06-03 14:36:45.393787 Details available
It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This only affects xdg-user-dirs before 0.15.5 as shipped with Red Hat Enterprise Linux.
Published: 2018-01-09T21:00:00.000Z
Updated: 2024-08-05T19:50:16.341Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.