Lucene search
RedHatRHSA-2018:0223HistoryJan 25, 2018 - 1:14 p.m.
(RHSA-2018:0223) Moderate: nautilus security update
2018-01-2513:14:18
access.redhat.com
41
0.002 Low
EPSS
Percentile
54.7%
Nautilus is the file manager and graphical shell for the GNOME desktop.
Security Fix(es):
- An untrusted .desktop file with executable permission set could choose its displayed name and icon, and execute commands without warning when opened by the user. An attacker could use this flaw to trick a user into opening a .desktop file disguised as a document, such as a PDF, and execute arbitrary commands. (CVE-2017-14604)
Note: This update will change the behavior of Nautilus. Nautilus will now prompt the user for confirmation when executing an untrusted .desktop file for the first time, and then add it to the trusted file list. Desktop files stored in the system directory, as specified by the XDG_DATA_DIRS environment variable, are always considered trusted and executed without prompt.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | i686 | nautilus | < 3.22.3-4.el7_4 | nautilus-3.22.3-4.el7_4.i686.rpm |
| RedHat | 7 | s390x | nautilus | < 3.22.3-4.el7_4 | nautilus-3.22.3-4.el7_4.s390x.rpm |
| RedHat | 7 | aarch64 | nautilus | < 3.22.3-4.el7_4 | nautilus-3.22.3-4.el7_4.aarch64.rpm |
| RedHat | 7 | x86_64 | nautilus-devel | < 3.22.3-4.el7_4 | nautilus-devel-3.22.3-4.el7_4.x86_64.rpm |
| RedHat | 7 | ppc64 | nautilus-devel | < 3.22.3-4.el7_4 | nautilus-devel-3.22.3-4.el7_4.ppc64.rpm |
| RedHat | 7 | s390 | nautilus-debuginfo | < 3.22.3-4.el7_4 | nautilus-debuginfo-3.22.3-4.el7_4.s390.rpm |
| RedHat | 7 | ppc64le | nautilus-extensions | < 3.22.3-4.el7_4 | nautilus-extensions-3.22.3-4.el7_4.ppc64le.rpm |
| RedHat | 7 | i686 | nautilus-devel | < 3.22.3-4.el7_4 | nautilus-devel-3.22.3-4.el7_4.i686.rpm |
| RedHat | 7 | ppc | nautilus | < 3.22.3-4.el7_4 | nautilus-3.22.3-4.el7_4.ppc.rpm |
| RedHat | 7 | x86_64 | nautilus-debuginfo | < 3.22.3-4.el7_4 | nautilus-debuginfo-3.22.3-4.el7_4.x86_64.rpm |
Related
centos
centos
nautilus security update
2018-01-26 01:32:49
nessus
nessus
SUSE SLED12 / SLES12 Security Update : nautilus (SUSE-SU-2018:2058-1)
2018-07-26 00:00:00
RHEL 5 : nautilus (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 7 : nautilus (RHSA-2018:0223)
2018-01-25 00:00:00
suse
suse
Security update for nautilus (low)
2018-08-06 15:12:01
cvelist
cvelist
CVE-2017-14604
2017-09-20 08:00:00
oraclelinux
oraclelinux
nautilus security update
2018-01-25 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for nautilus (EulerOS-SA-2018-1053)
2020-01-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:2058-1)
2021-04-19 00:00:00
openSUSE: Security Advisory for nautilus (openSUSE-SU-2018:2210-1)
2018-08-07 00:00:00
osv
osv
CVE-2017-14604
2017-09-20 08:29:00
nautilus - security update
2017-10-07 00:00:00
nvd
nvd
CVE-2017-14604
2017-09-20 08:29:00
debiancve
debiancve
CVE-2017-14604
2017-09-20 08:29:00
debian
debian
[SECURITY] [DSA 3994-1] nautilus security update
2017-10-08 08:02:14
amazon
amazon
Medium: nautilus
2018-02-20 21:42:00
ubuntucve
ubuntucve
CVE-2017-14604
2017-09-20 00:00:00
cve
cve
CVE-2017-14604
2017-09-20 08:29:00
redhatcve
redhatcve
CVE-2017-14604
2017-09-20 09:18:39
prion
prion
Command injection
2017-09-20 08:29:00