Ubuntu 14.04 LTS : KDE-Libs vulnerability (USN-3286-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3286-1 advisory. Sebastian Krahmer discovered that the KDE-Libs Kauth component incorrectly checked services invoking D-Bus. A local attacker could use this issue to gain root...

USN-3286-1: KDE-Libs vulnerability

Sebastian Krahmer discovered that the KDE-Libs Kauth component incorrectly checked services invoking D-Bus. A local attacker could use this issue to gain root privileges...

USN-3286-1 kde4libs vulnerability

Sebastian Krahmer discovered that the KDE-Libs Kauth component incorrectly checked services invoking D-Bus. A local attacker could use this issue to gain root privileges...

[SECURITY] Fedora 26 Update: kdelibs-4.14.30-2.fc26

Libraries for KDE 4...

[SECURITY] Fedora 25 Update: kdelibs-4.14.30-2.fc25

Libraries for KDE 4...

Ubuntu: Security Advisory (USN-3286-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-5330

ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications...

Fedora 24 : kdelibs3 (2017-01eed6fe8c)

This kdelibs3 KDE 3 compatibility libraries update fixes the security issues : - CVE-2016-6232 karchive: Extraction of tar files possible to arbitrary system locations - CVE-2017-6410 kio: Information Leak when accessing https when using a malicious PAC file for the KDE 3 compatibility libraries...

Fedora 25 : kdelibs3 (2017-4f4eef4791)

This kdelibs3 KDE 3 compatibility libraries update fixes the security issues : - CVE-2016-6232 karchive: Extraction of tar files possible to arbitrary system locations - CVE-2017-6410 kio: Information Leak when accessing https when using a malicious PAC file for the KDE 3 compatibility libraries...

FreeBSD : kde-runtime -- kdesu: displayed command truncated by unicode string terminator (41fe4724-06a2-11e7-8e3e-5453ed2e2b49)

Albert Aastals Cid reports : A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as super user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

[SECURITY] Fedora 25 Update: kdelibs3-3.5.10-84.fc25

Libraries for KDE 3: KDE Libraries included: kdecore KDE core library, kdeui user interface, kfm file manager, khtmlw HTML widget, kio Input/Output, networking, kspell spelling checker, jscript javascript, kab addressbook, kimgio image manipulation...

[SECURITY] Fedora 24 Update: kdelibs3-3.5.10-84.fc24

Libraries for KDE 3: KDE Libraries included: kdecore KDE core library, kdeui user interface, kfm file manager, khtmlw HTML widget, kio Input/Output, networking, kspell spelling checker, jscript javascript, kab addressbook, kimgio image manipulation...

[SECURITY] Fedora 24 Update: kdelibs-4.14.29-2.fc24

Libraries for KDE 4...

Ubuntu 14.04 LTS : KDE-Libs vulnerability (USN-3223-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3223-1 advisory. Itzik Kotler, Yonatan Fridburg, and Amit Klein discovered that KDE-Libs incorrectly handled certain PAC files. A remote attacker could possibly use this issue to...

USN-3223-1: KDE-Libs vulnerability

Itzik Kotler, Yonatan Fridburg, and Amit Klein discovered that KDE-Libs incorrectly handled certain PAC files. A remote attacker could possibly use this issue to obtain sensitive information...

USN-3223-1 kde4libs vulnerability

Itzik Kotler, Yonatan Fridburg, and Amit Klein discovered that KDE-Libs incorrectly handled certain PAC files. A remote attacker could possibly use this issue to obtain sensitive information...

[SECURITY] Fedora 25 Update: kdelibs-4.14.29-2.fc25

Libraries for KDE 4...

[SECURITY] Fedora 25 Update: kf5-kio-5.31.0-2.fc25

KDE Frameworks 5 Tier 3 solution for filesystem abstraction...

CVE-2017-6410

kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL potentially including Basic Authentication credentials, a query string, or PATHINFO, which allows remote attackers to obtain sensitive information via a crafted PAC file...

CVE-2017-6410

kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL potentially including Basic Authentication credentials, a query string, or PATHINFO, which allows remote attackers to obtain sensitive information via a crafted PAC file...