Parrot Security 4.4 - Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind

Parrot 4.4 is now available for download. This release provides security and stability updates and is the starting point for the plan to develop an LTS edition of Parrot. Parrot 4.4 Development Goals The Parrot 4.4 development process involved the ideas of many people in the community, and the go...

Fedora Update for kde-connect FEDORA-2018-0741f1ca08

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 28 Update: kde-connect-1.3.3-1.fc28

KDE Connect adds communication between KDE and your smartphone. Currently, you can pair with your Android devices over Wifi using the KDE Connect 1.0 app from Albert Vaka which you can obtain via Google Play, F-Droid or the project website...

[SECURITY] Fedora 27 Update: kde-connect-1.3.3-1.fc27

KDE Connect adds communication between KDE and your smartphone. Currently, you can pair with your Android devices over Wifi using the KDE Connect 1.0 app from Albert Vaka which you can obtain via Google Play, F-Droid or the project website...

Fedora 27 : kde-connect (2018-5201a9c4dc)

Security fix release, Changes since 1.3.1 : - Security fix Don't disable all modern SSH encryption algorithms. - Remote media player info didn't update under some circumstances. - Remove characters from commands UUIDs that aren't legal in URLs. - New notifications now appear on top and not in the...

[SECURITY] Fedora 29 Update: kde-connect-1.3.3-1.fc29

KDE Connect adds communication between KDE and your smartphone. Currently, you can pair with your Android devices over Wifi using the KDE Connect 1.0 app from Albert Vaka which you can obtain via Google Play, F-Droid or the project website...

FreeBSD : kio-extras -- HTML Thumbnailer automatic remote file access (1460aa25-e6ab-11e8-a733-e0d55e2a8bf9)

Albert Astals Cid reports : Various KDE applications share a plugin system to create thumbnails of various file types for displaying in file managers, file dialogs, etc. kio-extras contains a thumbnailer plugin for HTML files. The HTML thumbnailer was incorrectly accessing some content of remote...

kio-extras -- HTML Thumbnailer automatic remote file access

Albert Astals Cid reports: Various KDE applications share a plugin system to create thumbnails of various file types for displaying in file managers, file dialogs, etc. kio-extras contains a thumbnailer plugin for HTML files. The HTML thumbnailer was incorrectly accessing some content of remote...

Okular: Directory traversal

Background Okular is a universal document viewer based on KPDF for KDE 4. Description It was discovered that Okular contains a Directory Traversal vulnerability in function unpackDocumentArchive in core/document.cpp. Impact A remote attacker could entice a user to open a specially crafted Okular...

[SECURITY] Fedora 28 Update: cantata-2.3.1-1.fc28

Cantata is a graphical client for the music player daemon MPD. Features: Multiple MPD collections. Highly customisable layout. Songs grouped by album in play queue. Context view to show artist, album, and song information of current track. Simple tag editor. File organizer - use tags to organize...

[SECURITY] Fedora 27 Update: cantata-2.3.1-1.fc27

Cantata is a graphical client for the music player daemon MPD. Features: Multiple MPD collections. Highly customisable layout. Songs grouped by album in play queue. Context view to show artist, album, and song information of current track. Simple tag editor. File organizer - use tags to organize...

openSUSE Security Update : MozillaFirefox / mozilla-nss (openSUSE-2018-575)

This update for MozillaFirefox, mozilla-nss fixes the following issues : Security issue fixed in Mozilla Firefox 60.0.2 ESR : - CVE-2018-6126: Heap buffer overflow rasterizing paths in SVG with Skia MFSA 2018-14, boo1096449 The following bugs were fixed : - In KDE Open with option in download...

Design/Logic Flaw

kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack...

CVE-2018-10380

kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack...

CVE-2018-10380

kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack...

CVE-2018-10380

kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack...

DEBIAN-CVE-2018-10380

kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack...

CVE-2018-10380

CVE-2018-10380 affects kwallet-pam in KDE KWallet prior to 5.12.6, where local users can exploit a symlink to obtain ownership of arbitrary files. The vulnerability stems from insecure permission handling in the PAM module, enabling local privilege elevation with complete confidentiality, integri...

CVE-2018-10380

kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack...

CVE-2018-10380

kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack...