Insecure temporary file creation in get_socket_name function was found leading to potential access violation. Upstream patch: https://git.lxde.org/gitweb/?p=lxde/pcmanfm.git;a=commitdiff;h=bc8c3d871e9ecc67c47ff002b68cf049793faf08
Acknowledgments: Name: Mamoru Tasaka
Created pcmanfm tracking bugs for this issue: Affects: fedora-all [bug 1451065]
External References: http://seclists.org/oss-sec/2017/q2/261
CVE-2017-7498 was rejected!
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.