Mageia: MGASA-2018-0476 Critical: Messagelib HTML Email Threat
mageia
December 3, 2018
Some HTML emails can trick messagelib into opening a new browser window when displaying said email as HTML
Summary
Some HTML emails can trick messagelib into opening a new browser window
when displaying said email as HTML. This happens even if the option to
allow the HTML emails to access remote servers is disabled in KMail
settings. This means that the owners of the servers referred in the
email can see in their access logs your IP address (CVE-2018-19516).
References
- https://bugs.mageia.org/show_bug.cgi?id=23923
- https://kde.org/info/security/advisory-20181128-1.txt
- https://www.cve.org/CVERecord?id=CVE-2018-19516
Topics Covered
Resolution
SRPMS
- 6/core/messagelib-17.12.2-1.1.mga6
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Publication date: 03 Dec 2018
URL: https://advisories.mageia.org/MGASA-2018-0476.html
Type: security
CVE: CVE-2018-19516
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!