Bug#1053881: tracker-miners: CVE-2023-5557

[Moritz Mühlenhoff]

Source: tracker-miners
X-Debbugs-CC: team at security.debian.org
Severity: important
Tags: security

Hi,

The following vulnerability was published for tracker-miners.

CVE-2023-5557[0]:
| A flaw was found in the tracker-miners package. A weakness in the
| sandbox allows a maliciously-crafted file to execute code outside
| the sandbox if the tracker-extract process has first been
| compromised by a separate vulnerability.

https://gitlab.gnome.org/GNOME/tracker-miners/-/issues/277
https://gitlab.gnome.org/GNOME/tracker-miners/-/merge_requests/480

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2023-5557
    https://www.cve.org/CVERecord?id=CVE-2023-5557

Please adjust the affected versions in the BTS as needed.