[SECURITY] Fedora 37 Update: kwayland-integration-5.27.1-1.fc37

Provides integration plugins for various KDE Frameworks for Wayland...

[SECURITY] Fedora 37 Update: kscreen-5.27.1.1-1.fc37

KCM and KDED modules for managing displays in KDE...

[SECURITY] Fedora 37 Update: kmenuedit-5.27.1-1.fc37

KDE menu editor...

[SECURITY] Fedora 37 Update: kinfocenter-5.27.1-1.fc37

KDE Info Center...

[SECURITY] Fedora 37 Update: khotkeys-5.27.1-1.fc37

An advanced editor component which is used in numerous KDE applications requiring a text editing component...

[SECURITY] Fedora 37 Update: kde-gtk-config-5.27.1-1.fc37

This is a System Settings configuration module for configuring the appearance of GTK apps in KDE...

[SECURITY] Fedora 37 Update: kde-cli-tools-5.27.1-1.fc37

Provides several KDE and Plasma specific command line tools to allow better interaction with the system...

[SECURITY] Fedora 37 Update: bluedevil-5.27.1-1.fc37

BlueDevil is the bluetooth stack for KDE...

SUSE CVE-2003-0459

KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites...

SUSE CVE-2004-0527

KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack...

SUSE CVE-2005-0396

Desktop Communication Protocol DCOP daemon, aka dcopserver, in KDE before 3.4 allows local users to cause a denial of service dcopserver consumption by "stalling the DCOP authentication process."...

SUSE CVE-2005-0754

Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code...

SUSE CVE-2005-2101

langen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names, which allows local users to overwrite arbitrary files...

SUSE CVE-2006-0301

Heap-based buffer overflow in Splash.cc in xpdf, as used in other products such as 1 poppler, 2 kdegraphics, 3 gpdf, 4 pdfkit.framework, and others, allows attackers to cause a denial of service and possibly execute arbitrary code via crafted splash images that produce certain values that exceed...

SUSE CVE-2006-2449

KDE Display Manager KDM in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login...

SUSE CVE-2006-4811

Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted pixmap image...

SUSE CVE-2006-6297

Stack consumption vulnerability in the KFILE JPEG kfilejpeg plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service stack consumption via a crafted EXIF section in a JPEG file, which results in an infinite recursio...

SUSE CVE-2006-6660

The nodeType function in KDE libkhtml 4.2.0 and earlier, as used by Konquerer, KMail, and other programs, allows remote attackers to cause a denial of service crash via malformed HTML tags, possibly involving a COL SPAN tag embedded in a RANGE tag...

SUSE CVE-2006-7139

Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of service crash via an HTML e-mail with certain table and frameset tags that trigger a segmentation fault, possibly involving invalid free or delete operations...

SUSE CVE-2007-0537

The KDE HTML library kdelibs, as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to...