This update fixes an XSS vulnerability on the qute://history page (:history).
The vulnerability allowed websites to inject HTML into the page via a crafted title tag. This could allow them to steal your browsing history.
It also ships some minor fixes not worth mentioning.
Add a few (minor) options.
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2018-fa19f76ac5
Please log in to add feedback.
This update has been submitted for testing by fnux.
This update has obsoleted qutebrowser-1.3.2-1.fc27, and has inherited its bugs and notes.
This update has been pushed to testing.
The above vulnerability is now known as CVE-2018-1000559.
This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes
This update has been submitted for batched by fnux.
This update has been submitted for stable by bodhi.
This update has been pushed to stable.