Skip to content
OpenAdvisories
Unscored CVE-2015-8079 EUVD-2015-7972GHSA-wwwx-88mv-pg56

qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db.

Published Sep 7, 2017 · Updated Aug 6, 2024 · Assigned by redhat

Package: qtwebkit-opensource-src Package: qtwebkit-source Package: webkitgtk Ecosystem: Ubuntu

Description

qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS webkitgtk +2 No fix yet —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 SP1 at 3.1.14-7.3 SUSE-SU-2016:2397-1
SLES 12 SP1 bogofilter 1.2.4-5.3 SUSE-SU-2016:2397-1
SLES 12 SP1 cyrus-imapd 2.3.18-40.1 SUSE-SU-2016:2397-1
SLES 12 SP1 flex 2.5.37-8.1 SUSE-SU-2016:2397-1
SLES 12 SP1 kdelibs4 4.12.0-7.3 SUSE-SU-2016:2397-1
SLES 12 SP1 libQtWebKit4 4.8.6+2.3.3-3.1 SUSE-SU-2016:2397-1
SLES 12 SP1 libbonobo 2.32.1-16.1 SUSE-SU-2016:2397-1
SLES 12 SP1 mdbtools 0.7-5.1 SUSE-SU-2016:2397-1
SLES 12 SP1 netpbm 10.66.3-4.1 SUSE-SU-2016:2397-1
SLES 12 SP1 openslp 2.0.0-11.1 SUSE-SU-2016:2397-1
SLES 12 SP1 sgmltool 1.0.9-1075.1 SUSE-SU-2016:2397-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 SP1 at 3.1.14-7.3 SUSE-SU-2016:2397-1
SLES for SAP 12 SP1 cyrus-imapd 2.3.18-40.1 SUSE-SU-2016:2397-1
SLES for SAP 12 SP1 flex 2.5.37-8.1 SUSE-SU-2016:2397-1
SLES for SAP 12 SP1 kdelibs4 4.12.0-7.3 SUSE-SU-2016:2397-1
SLES for SAP 12 SP1 libQtWebKit4 4.8.6+2.3.3-3.1 SUSE-SU-2016:2397-1
SLES for SAP 12 SP1 libbonobo 2.32.1-16.1 SUSE-SU-2016:2397-1
SLES for SAP 12 SP1 netpbm 10.66.3-4.1 SUSE-SU-2016:2397-1
SLES for SAP 12 SP1 openslp 2.0.0-11.1 SUSE-SU-2016:2397-1

Advisories 1

References