Daily Python: qutebrowser development blog: CVE-2021-41146: Arbitrary command execution in qutebrowser on Windows via URL handler

Thursday, October 21, 2021

qutebrowser development blog: CVE-2021-41146: Arbitrary command execution in qutebrowser on Windows via URL handler

I'm happy to announce that I just released qutebrowser v2.4.0!

This release fixes a high-severity arbitrary command execution on Windows via URL handlers, see the security advisory and commit message for details.

Windows users are urged to update as soon as possible. For everyone else, this is a …

from Planet Python
via read more

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)