Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Fedora 20: 2015-4587 Critical: QtWebKit URL Logging Threat

fedora
Calendar Grey April 21, 2015
Scroller Fedora
Enhance tracking of URL accesses in incognito mode for Fedora 20 applications leveraging qt5-qtwebkit.
QtWebKit logs visited URLs to WebpageIcons.db in private browsing mode.

Summary

Qt5 - QtWebKit components

Update Information:

QtWebKit logs visited URLs to WebpageIcons.db in private browsing mode.

Topics%20covered

Topics Covered

security advisory critical issue Fedora url logging qt5-qtwebkit

Change Log

* Mon Mar 23 2015 Rex Dieter 5.4.1-4 - QtWebKit logs visited URLs to WebpageIcons.db in private browsing mode (#1204795,#1204798) * Wed Mar 18 2015 Than Ngo - 5.4.1-3 - fix build failure with new gcc5 * Fri Feb 27 2015 Rex Dieter - 5.4.1-2 - rebuild (gcc5) * Tue Feb 24 2015 Jan Grulich 5.4.1-1 - 5.4.1 * Tue Feb 17 2015 Than Ngo 5.4.0-4 - fix GMutexLocker build problem * Tue Feb 17 2015 Rex Dieter 5.4.0-3 - rebuild (gcc5) * Mon Jan 26 2015 David Tardon - 5.4.0-2 - rebuild for ICU 54.1 * Wed Dec 10 2014 Rex Dieter 5.4.0-1 - 5.4.0 (final) * Fri Nov 28 2014 Rex Dieter 5.4.0-0.5.rc - 5.4.0-rc * Tue Nov 18 2014 Rex Dieter 5.4.0-0.4.beta - use gst1 only fc21+ (and el8+) only * Mon Nov 3 2014 Rex Dieter 5.4.0-0.3.beta - fix hardening, use new %qmake_qt5 macro * Sat Nov 1 2014 Rex Dieter 5.4.0-0.2.beta - enable hardened build, out-of-src tree build * Sat Oct 18 2014 Rex Dieter 5.4.0-0.1.beta - 5.4.0-beta * Tue Sep 16 2014 Rex Dieter 5.3.2-1 - 5.3.2 * Tue Aug 26 2014 David Tardon - 5.3.1-3 - rebuild for ICU 53.1 * Sun Aug 17 2014 Fedora Release Engineering - 5.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Tue Jun 17 2014 Jan Grulich - 5.3.1-1 - 5.3.1 * Sun Jun 8 2014 Fedora Release Engineering - 5.3.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Wed May 21 2014 Jan Grulich 5.3.0-1 - 5.3.0 * Mon May 5 2014 Rex Dieter 5.2.1-4 - use standard (same as qtbase) .prl sanitation * Fri May 2 2014 Rex Dieter 5.2.1-3 - no rpath, drop chrpath hacks - BR: qt5-qtlocation qt5-qtsensors* Wed Feb 12 2014 Rex Dieter 5.2.1-2 - rebuild (libicu) * Wed Feb 5 2014 Rex Dieter 5.2.1-1 - 5.2.1 * Sun Feb 2 2014 Rex Dieter 5.2.0-3 - Add AArch64 support to qtwebkit (#1056160) * Wed Jan 1 2014 Rex Dieter 5.2.0-2 - rebuild (libwebp) * Thu Dec 12 2013 Rex Dieter 5.2.0-1 - 5.2.0 * Mon Dec 2 2013 Rex Dieter 5.2.0-0.10.rc1 - 5.2.0-rc1

References


[ 1 ] Bug #1204795 - qt5-qtwebkit: QtWebKit logs visited URLs to WebpageIcons.db in private browsing mode https://bugzilla.redhat.com/show_bug.cgi?id=1204795

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update qt5-qtwebkit' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: qt5-qtwebkit
Product: Fedora 20
Version: 5.4.1
Release: 4.fc20
URL: https://contribute.qt-project.org/
Summary: Qt5 - QtWebKit components

Topics%20covered

Topics Covered

security advisory critical issue Fedora url logging qt5-qtwebkit

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.