/[advisories]/27297.adv
ViewVC logotype

Contents of /27297.adv

Parent Directory Parent Directory | Revision Log Revision Log


Revision 10811 - (show annotations) (download)
Wed Sep 23 15:43:06 2020 UTC (3 years, 7 months ago) by auroud85
File size: 547 byte(s)
Adding security advisory for kio-extras mga#27297
1 type: security
2 subject: Updated kio-extras packages fix security vulnerability
3 CVE:
4 - CVE-2020-12755
5 src:
6 7:
7 core:
8 - kio-extras-19.04.0-1.1.mga7
9 description: |
10 fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through
11 20.04.0 makes a cacheAuthentication call even if the user had not set the
12 keepPassword option. This may lead to unintended KWallet storage of the
13 password (CVE-2020-12755).
14 references:
15 - https://bugs.mageia.org/show_bug.cgi?id=27297
16 - https://kde.org/info/security/advisory-20200510-1.txt

  ViewVC Help
Powered by ViewVC 1.1.30