Fedora: Security Advisory for kf5-messagelib (FEDORA-2021-bdaf015218)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 32 Update: kf5-messagelib-19.12.2-2.fc32

KDE Message libraries...

GLSA-202101-16 : KDE Connect: Denial of service

The remote host is affected by the vulnerability described in GLSA-202101-16 KDE Connect: Denial of service Multiple issues causing excessive resource consumption were found in KDE Connect. Impact : An attacker could cause a possible Denial of Service condition. Workaround : There is no known...

openSUSE Security Update : kdeconnect-kde (openSUSE-2020-2343)

This update for kdeconnect-kde fixes the following issue : - Add fingerprinting for device verification boo1177672. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-2343. The text description of this...

openSUSE Security Update : kdeconnect-kde (openSUSE-2020-2334)

This update for kdeconnect-kde fixes the following issues : - Add fingerprinting for device verification boo1177672. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-2334. The text description of thi...

KDE Connect: Denial of service

Background KDE Connect is a project that enables all your devices to communicate with each other. Description Multiple issues causing excessive resource consumption were found in KDE Connect. Impact An attacker could cause a possible Denial of Service condition. Workaround There is no known...

GLSA-202101-06 : Ark: Symlink vulnerability

The remote host is affected by the vulnerability described in GLSA-202101-06 Ark: Symlink vulnerability KDE Ark did not fully verify symlinks contained within tar archives. Impact : A remote attacker could entice a user to open a specially crafted tar archive using KDE Ark, possibly resulting in...

Ark: Symlink vulnerability

Background Ark is a graphical file compression/decompression utility with support for multiple formats. Description KDE Ark did not fully verify symlinks contained within tar archives. Impact A remote attacker could entice a user to open a specially crafted tar archive using KDE Ark, possibly...

OPENSUSE-SU-2020:2363-1 Security update for kdeconnect-kde

This update for kdeconnect-kde fixes the following issue: - Add fingerprinting for device verification boo1177672. This update was imported from the openSUSE:Leap:15.2:Update update project...

Security update for kdeconnect-kde (important)

openSUSE Security Update: Security update for kdeconnect-kde Announcement ID: openSUSE-SU-2020:2363-1 Rating: important References: 1177672 Affected Products: openSUSE Backports SLE-15-SP2 An update that contains security fixes can now be installed. Description: This update for kdeconnect-kde fix...

OPENSUSE-SU-2020:2361-1 Security update for kdeconnect-kde

This update for kdeconnect-kde fixes the following issues: - Add fingerprinting for device verification boo1177672. This update was imported from the openSUSE:Leap:15.1:Update update project...

Security update for kdeconnect-kde (important)

openSUSE Security Update: Security update for kdeconnect-kde Announcement ID: openSUSE-SU-2020:2361-1 Rating: important References: 1177672 Affected Products: openSUSE Backports SLE-15-SP1 An update that contains security fixes can now be installed. Description: This update for kdeconnect-kde fix...

OPENSUSE-SU-2020:2343-1 Security update for kdeconnect-kde

This update for kdeconnect-kde fixes the following issue: - Add fingerprinting for device verification boo1177672...

OPENSUSE-SU-2020:2334-1 Security update for kdeconnect-kde

This update for kdeconnect-kde fixes the following issues: - Add fingerprinting for device verification boo1177672...

Security update for kdeconnect-kde (important)

openSUSE Security Update: Security update for kdeconnect-kde Announcement ID: openSUSE-SU-2020:2334-1 Rating: important References: 1177672 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for kdeconnect-kde fixes the...

Security update for kdeconnect-kde (important)

openSUSE Security Update: Security update for kdeconnect-kde Announcement ID: openSUSE-SU-2020:2343-1 Rating: important References: 1177672 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for kdeconnect-kde fixes the...

Virtuozzo 7 : kdelibs / kdelibs-apidocs / kdelibs-common / etc (VZLSA-2019-2606)

An update for kdelibs and kde-setting is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Information Disclosure

KDE KMail is vulnerable to information disclosure. An insecure unencrypted POP3 communication is used despite the UI indicating that encryption is in use...

MGASA-2020-0416 Updated kdeconnect-kde packages fix a security vulnerability

An attacker on your local network could send maliciously crafted packets to other hosts running kdeconnect on the network, causing them to use large amounts of CPU, memory or network connections, which could be used in a Denial of Service attack within the network. CVE-2020-26164...

CVE-2020-27187

An issue was discovered in KDE Partition Manager 4.1.0 before 4.2.0. The kpmcoreexternalcommand helper contains a logic flaw in which the service invoking D-Bus is not properly checked. An attacker on the local machine can replace /etc/fstab, and execute mount and other partitioning related...