Fedora Update for kio-extras FEDORA-2018-27399fd25e

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 27 : kio-extras (2018-50eceed44a)

Drop -htmlthumbnailer, it has security implications and didn't work all that well. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible withou...

[SECURITY] Fedora 27 Update: kio-extras-17.12.3-1.fc27.1

Additional components to increase the functionality of KIO Framework...

[SECURITY] Fedora 28 Update: kio-extras-18.08.3-1.fc28

Additional components to increase the functionality of KIO Framework...

[SECURITY] Fedora 29 Update: kio-extras-18.08.3-1.fc29

Additional components to increase the functionality of KIO Framework...

KDE kio-extras HTML Thumbnailer Plugin Information Disclosure Vulnerability

KDE is a free and open source X desktop management program for Linux and Unix workstations. kDE provides support for a variety of network protocols through the KIO subsystem. kio-extras is one of the components used to increase the functionality of KIO. HTML Thumbnailer plug-in is one of the...

FreeBSD : kio-extras -- HTML Thumbnailer automatic remote file access (1460aa25-e6ab-11e8-a733-e0d55e2a8bf9)

Albert Astals Cid reports : Various KDE applications share a plugin system to create thumbnails of various file types for displaying in file managers, file dialogs, etc. kio-extras contains a thumbnailer plugin for HTML files. The HTML thumbnailer was incorrectly accessing some content of remote...

openSUSE Security Update : kdelibs4 / kio (openSUSE-2017-334)

This update for kdelibs4, kio fixes the following issues : - CVE-2017-6410: Information Leak when accessing https when using a malicious PAC file boo1027520 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

OPENSUSE-SU-2017:0680-1 Security update for kdelibs4, kio

This update for kdelibs4, kio fixes the following issues: - CVE-2017-6410: Information Leak when accessing https when using a malicious PAC file boo1027520...

Fedora 24 : kdelibs3 (2017-01eed6fe8c)

This kdelibs3 KDE 3 compatibility libraries update fixes the security issues : - CVE-2016-6232 karchive: Extraction of tar files possible to arbitrary system locations - CVE-2017-6410 kio: Information Leak when accessing https when using a malicious PAC file for the KDE 3 compatibility libraries...

[SECURITY] Fedora 25 Update: kdelibs3-3.5.10-84.fc25

Libraries for KDE 3: KDE Libraries included: kdecore KDE core library, kdeui user interface, kfm file manager, khtmlw HTML widget, kio Input/Output, networking, kspell spelling checker, jscript javascript, kab addressbook, kimgio image manipulation...

[SECURITY] Fedora 24 Update: kdelibs3-3.5.10-84.fc24

Libraries for KDE 3: KDE Libraries included: kdecore KDE core library, kdeui user interface, kfm file manager, khtmlw HTML widget, kio Input/Output, networking, kspell spelling checker, jscript javascript, kab addressbook, kimgio image manipulation...

Fedora 25 : kf5-kio (2017-f9ab92fa6c)

Security fix for CVE-2017-6410 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora Update for kf5-kio FEDORA-2017-f9ab92fa6c

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KDE kio and kdelibs Information Disclosure Vulnerability

KDE kio and kdelibs are both products of the KDE company. kdelibs was created on top of the Qt framework, which provides the framework and many features to develop KDE software. An information disclosure vulnerability exists in KDE kio prior to version 5.32 and kdelibs prior to version 4.14.30. A...

CVE-2017-6410

kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL potentially including Basic Authentication credentials, a query string, or PATHINFO, which allows remote attackers to obtain sensitive information via a crafted PAC file...

CVE-2017-6410

kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL potentially including Basic Authentication credentials, a query string, or PATHINFO, which allows remote attackers to obtain sensitive information via a crafted PAC file...

CVE-2017-6410

kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL potentially including Basic Authentication credentials, a query string, or PATHINFO, which allows remote attackers to obtain sensitive information via a crafted PAC file...

Authentication flaw

kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL potentially including Basic Authentication credentials, a query string, or PATHINFO, which allows remote attackers to obtain sensitive information via a crafted PAC file...

CVE-2017-6410

Affected components: KDE kio (kpac/script.cpp) before 5.32 and kde4libs before 4.14.30. Root cause / flaw: PAC FindProxyForURL called with a full HTTPS URL, potentially including Basic Auth credentials, a query string, or PATH_INFO, enabling leakage of sensitive information via crafted PAC files....