Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Fedora 27: FEDORA-2018-50eceed44a Critical: Kio-Extras Remote Access Risk

fedora
Calendar Grey November 25, 2018
Dist Fedora Esm H88
Fedora 28 kio-extras patch removed a module due to vulnerabilities. Apply the update to maintain security!
Drop -htmlthumbnailer, it has security implications and didn't work all that well.

Summary

Additional components to increase the functionality of KIO Framework.

Drop -htmlthumbnailer, it has security implications and didn't work all that

well.

* Thu Nov 15 2018 Rex Dieter - 17.12.3-1.1

- drop -htmlthumbnail: CVE-2018-19120 kio-extras: HTML Thumbnailer automatic remote file access (#1649421)

* Mon Apr 2 2018 Rex Dieter - 17.12.3-1

- 17.12.3

- %check: skip tests, seem to be hanging despite setting 10s timeout

- use %ldconfig_scriptlets

* Thu Feb 8 2018 Rex Dieter - 17.12.2-1

- 17.12.2

* Wed Feb 7 2018 Fedora Release Engineering - 17.12.1-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

* Thu Jan 11 2018 Rex Dieter - 17.12.1-1

- 17.12.1

* Wed Jan 10 2018 Kevin Kofler - 17.12.0-2

- Build against libtirpc (#1532944), patch from Cygwin Ports

* Thu Dec 28 2017 Rex Dieter - 17.12.0-1

- 17.12.0

* Mon Nov 6 2017 Rex Dieter - 17.08.2-2

- pull in smb-related upstream fixes

* Wed Oct 11 2017 Rex Dieter - 17.08.2-1

- 17.08.2

[ 1 ] Bug #1649420 - CVE-2018-19120 kio-extras: HTML Thumbnailer automatic remote file access

https://bugzilla.redhat.com/show_bug.cgi?id=1649420

su -c 'dnf upgrade --advisory FEDORA-2018-50eceed44a' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 27
Version: 17.12.3
Release: 1.fc27.1
URL: Summary : Additional components to increase the functionality of KIO Framework

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here