[SECURITY] Fedora 37 Update: plasma-browser-integration-5.27.1-1.fc37

plasma-browser-integration coupled with a browser plugin provides integration of the browser in the desktop. For more information, see https://community.kde.org/Plasma/BrowserIntegration...

[SECURITY] Fedora 37 Update: plasma-breeze-5.27.1-1.fc37

Artwork, styles and assets for the Breeze visual style for the Plasma Desktop...

[SECURITY] Fedora 37 Update: kdeplasma-addons-5.27.1-1.fc37

Additional Plasmoids for Plasma 5...

[SECURITY] Fedora 37 Update: kde-cli-tools-5.27.1-1.fc37

Provides several KDE and Plasma specific command line tools to allow better interaction with the system...

[SECURITY] Fedora 37 Update: kactivitymanagerd-5.27.1-1.fc37

Plasma service to manage user's activities...

Fedora 37 : bluedevil / breeze-gtk / flatpak-kcm / grub2-breeze-theme / etc (2023-e31c3e4b6c)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-e31c3e4b6c advisory. Plasma 5.27.1 ---- Add patch to disable global shortcuts at login for the SDDM Plasma Wayland configuration 2171332 Tenable has extracted the preceding...

SUSE CVE-2013-2120

The %password... macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack...

SUSE CVE-2013-4133

kde-workspace before 4.10.5 has a memory leak in plasma desktop...

SUSE CVE-2015-1307

plasma-workspace before 5.1.95 allows remote attackers to obtain passwords via a Trojan horse Look and Feel package...

SUSE CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

SUSE CVE-2016-2312

Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again...

SUSE CVE-2018-6790

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

SUSE CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

MAL-2022-5357 Malicious code in plasma-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f300352b323800a3154dfce1f16a11c7ce371b21cec200bca74f81b1ae00c55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in plasma-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f300352b323800a3154dfce1f16a11c7ce371b21cec200bca74f81b1ae00c55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Kali Linux 2022.2 - Penetration Testing and Ethical Hacking Linux Distribution

Time for another Kali Linux release! – Kali Linux 2022.2. This release has various impressive updates. The summary of the changelog since the 2022.1 release from February 2022 is: GNOME 42 - Major release update of the popular desktop environment KDE Plasma 5.24 - Version bump with a more...

plasma-instrument.com Cross Site Scripting vulnerability OBB-2444548

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mageia: Security Advisory (MGASA-2021-0411)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0560)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated gpsd packages fix security vulnerability and other bugs

It was discovered that GPSd incorrectly handled certain leap second events which would result in the time jumping back 1024 weeks on 2021-10-31. This update provides upstream version 3.23 that has this and several other upstream issues fixed. It also fixes issues that prevents it to start properl...