Red Hat Security AdvisoryRHSA-2017:1264
kdelibs security update
Released 2017-05-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kdelibs-6:4.14.8-6.el7_3, kdelibs-common-6:4.14.8-6.el7_3, kdelibs-ktexteditor-6:4.14.8-6.el7_3
- Red Hat Enterprise Linux Client Optional (v. 7) kdelibs-apidocs-6:4.14.8-6.el7_3, kdelibs-devel-6:4.14.8-6.el7_3
- Red Hat Enterprise Linux ComputeNode (v. 7) kdelibs-6:4.14.8-6.el7_3, kdelibs-common-6:4.14.8-6.el7_3, kdelibs-ktexteditor-6:4.14.8-6.el7_3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kdelibs-apidocs-6:4.14.8-6.el7_3, kdelibs-devel-6:4.14.8-6.el7_3
- Red Hat Enterprise Linux Server (v. 7) kdelibs-6:4.14.8-6.el7_3, kdelibs-common-6:4.14.8-6.el7_3, kdelibs-devel-6:4.14.8-6.el7_3 +1
- Red Hat Enterprise Linux Server Optional (v. 7) kdelibs-6:4.14.8-6.el7_3, kdelibs-6:4.14.8-6.el7_3.ppc, kdelibs-apidocs-6:4.14.8-6.el7_3 +5
- Red Hat Enterprise Linux Workstation (v. 7) kdelibs-6:4.14.8-6.el7_3, kdelibs-common-6:4.14.8-6.el7_3, kdelibs-devel-6:4.14.8-6.el7_3 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) kdelibs-apidocs-6:4.14.8-6.el7_3
Fixes 1 record
Priority LOW 38
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01805 · Published 2017-05-17 · Fixed CWE-290
