CVE-2023-49347

Name	CVE-2023-49347
Description	Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may read private information from windows, present false information to users, or deny access to the application.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
budgie-extras (PTS)	buster	0.7.1-3	vulnerable
	bullseye	1.1.0-1	vulnerable
	bookworm	1.5.0-2	vulnerable
	sid, trixie	1.8.0-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
budgie-extras	source	(unstable)	1.7.1-1	unimportant

Notes

https://bugs.launchpad.net/bugs/2044373
https://www.openwall.com/lists/oss-security/2023/12/14/1
https://github.com/UbuntuBudgie/budgie-extras/commit/588cbe6ffa72df904213d77728a3fd5bfae7195e (v1.7.1)
Neutralised by kernel hardening