FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2025-12-08 21:19:55 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
1460aa25-e6ab-11e8-a733-e0d55e2a8bf9kio-extras -- HTML Thumbnailer automatic remote file access

Albert Astals Cid reports:

Various KDE applications share a plugin system to create thumbnails of various file types for displaying in file managers, file dialogs, etc. kio-extras contains a thumbnailer plugin for HTML files.

The HTML thumbnailer was incorrectly accessing some content of remote URLs listed in HTML files. This meant that the owners of the servers referred in HTML files in your system could have seen in their access logs your IP address every time the thumbnailer tried to create the thumbnail.

The HTML thumbnailer has been removed in upcoming KDE Applications 18.12.0 because it was actually not creating thumbnails for files at all.


Discovery 2018-11-12
Entry 2018-11-12
kio-extras
< 18.08.3_2

CVE-2018-19120
https://www.kde.org/info/security/advisory-20181012-1.txt