Stay Secure with the Latest Linux Advisories

security advisorymoderateremote access

Mageia 6: 2018-0478 Moderate: kio-extras Information Disclosure Risk

The HTML thumbnailer was incorrectly accessing some content of remote URLs listed in HTML files. This meant that the owners of the servers referred in HTML files in your system could have seen in their access logs your IP address every time the thumbnailer tried to create the thumbnail (CVE-2018-19120). . MGASA-2018-0477 - Updated kio-extras packages fix security vulnerability Publication date: 06 Dec 2018 URL: https://advisories.mageia.org/MGASA-2018-0477.html Type: security Affected Mageia releases: 6 CVE: CVE-2018-19120 The HTML thumbnailer was incorrectly accessing some content of remote URLs listed in HTML files. This meant that the owners of the serversreferred in HTML files in your system could have seen in their access logs your IP address every time the thumbnailer tried to create the thumbnail (CVE-2018-19120). References: - https://bugs.mageia.org/show_bug.cgi?id=23868 - - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/CWRCGXLPJHM4OFD66BINH2FIMYHRCRKF/ - https://www.cve.org/CVERecord?id=CVE-2018-19120 SRPMS: - 6/core/kio-extras-17.12.2-4.1.mga6 . The recent update addresses a vulnerability identified in the kio-extras package, which posed a security threat by enabling unauthorized remote access to the IP addresses of various servers.. kio-extras, security update, Mageia advisory. . LinuxSecurity.com Team

Dec 06, 2018 Mageia