Linux Mint
Monthly
Path traversal in Linux Mint Xreader 4.6.5 and earlier can disclose readable local files when a victim opens a crafted EPUB document in the built-in EPUB backend, and publicly available exploit code exists. Exploitation is remote but requires user interaction and no authentication; version 4.6.6 removes the EPUB backend entirely, and the practical impact is limited to low-confidentiality disclosure. This is a low-priority issue despite being remotely reachable.
GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.
Path traversal in Linux Mint Xreader 4.6.5 and earlier can disclose readable local files when a victim opens a crafted EPUB document in the built-in EPUB backend, and publicly available exploit code exists. Exploitation is remote but requires user interaction and no authentication; version 4.6.6 removes the EPUB backend entirely, and the practical impact is limited to low-confidentiality disclosure. This is a low-priority issue despite being remotely reachable.
GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.