This bug was fixed in the package qutebrowser - 1.1.1-1ubuntu0.1
---------------
qutebrowser (1.1.1-1ubuntu0.1) bionic-security; urgency=medium
* SECURITY UPDATE: Remote code execution due to CSRF on the qute://settings
page (LP: #1781295):
- fix-CVE-2018-10895.patch
- CVE-2018-10895
* Add a build dependency on dh-python, fixing the FTBFS.
-- Simon Quigley <[email protected]> Wed, 18 Jul 2018 19:24:09 -0500
** Changed in: qutebrowser (Ubuntu Bionic)
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1781295
Title:
CVE-2018-10895: Possible remote code execution via CSRF in
qute://settings
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qutebrowser/+bug/1781295/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
