Red Hat Security AdvisoryRHSA-2018:0223
nautilus security update
Released 2018-01-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) nautilus-3.22.3-4.el7_4, nautilus-extensions-3.22.3-4.el7_4
- Red Hat Enterprise Linux Client Optional (v. 7) nautilus-devel-3.22.3-4.el7_4
- Red Hat Enterprise Linux Server (v. 7) nautilus-3.22.3-4.el7_4, nautilus-3.22.3-4.el7_4.ppc, nautilus-extensions-3.22.3-4.el7_4 +1
- Red Hat Enterprise Linux Server Optional (v. 7) nautilus-devel-3.22.3-4.el7_4, nautilus-devel-3.22.3-4.el7_4.ppc
- Red Hat Enterprise Linux Workstation (v. 7) nautilus-3.22.3-4.el7_4, nautilus-extensions-3.22.3-4.el7_4
- Red Hat Enterprise Linux Workstation Optional (v. 7) nautilus-devel-3.22.3-4.el7_4
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) nautilus-3.22.3-4.el7_4, nautilus-extensions-3.22.3-4.el7_4
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) nautilus-devel-3.22.3-4.el7_4
Fixes 1 record
Priority LOW 34
GNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file extension, as demonstrated by an attack in which a .desktop file's Name field ends in .pdf but this file's Exec field launche…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02471 · Published 2017-09-20 · Partial fix CWE-20
