[SECURITY] Fedora 37 Update: plasma-desktop-5.27.1-1.fc37

Plasma Desktop shell...

[SECURITY] Fedora 37 Update: plasma-browser-integration-5.27.1-1.fc37

plasma-browser-integration coupled with a browser plugin provides integration of the browser in the desktop. For more information, see https://community.kde.org/Plasma/BrowserIntegration...

[SECURITY] Fedora 37 Update: plasma-breeze-5.27.1-1.fc37

Artwork, styles and assets for the Breeze visual style for the Plasma Desktop...

[SECURITY] Fedora 37 Update: kdeplasma-addons-5.27.1-1.fc37

Additional Plasmoids for Plasma 5...

[SECURITY] Fedora 37 Update: kde-cli-tools-5.27.1-1.fc37

Provides several KDE and Plasma specific command line tools to allow better interaction with the system...

[SECURITY] Fedora 37 Update: kactivitymanagerd-5.27.1-1.fc37

Plasma service to manage user's activities...

Fedora 37 : bluedevil / breeze-gtk / flatpak-kcm / grub2-breeze-theme / etc (2023-e31c3e4b6c)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-e31c3e4b6c advisory. Plasma 5.27.1 ---- Add patch to disable global shortcuts at login for the SDDM Plasma Wayland configuration 2171332 Tenable has extracted the preceding...

SUSE CVE-2013-2120

The %password... macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack...

SUSE CVE-2013-4133

kde-workspace before 4.10.5 has a memory leak in plasma desktop...

SUSE CVE-2015-1307

plasma-workspace before 5.1.95 allows remote attackers to obtain passwords via a Trojan horse Look and Feel package...

SUSE CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

SUSE CVE-2016-2312

Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again...

SUSE CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

SUSE CVE-2018-6790

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

MAL-2022-5357 Malicious code in plasma-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f300352b323800a3154dfce1f16a11c7ce371b21cec200bca74f81b1ae00c55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in plasma-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f300352b323800a3154dfce1f16a11c7ce371b21cec200bca74f81b1ae00c55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Kali Linux 2022.2 - Penetration Testing and Ethical Hacking Linux Distribution

Time for another Kali Linux release! – Kali Linux 2022.2. This release has various impressive updates. The summary of the changelog since the 2022.1 release from February 2022 is: GNOME 42 - Major release update of the popular desktop environment KDE Plasma 5.24 - Version bump with a more...

plasma-instrument.com Cross Site Scripting vulnerability OBB-2444548

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mageia: Security Advisory (MGASA-2021-0411)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0560)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...