Red Hat Security AdvisoryRHSA-2019:2606
kdelibs and kde-settings security and bug fix update
Released 2019-09-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kde-settings-19-23.10.el7_7, kde-settings-ksplash-19-23.10.el7_7, kde-settings-plasma-19-23.10.el7_7 +5
- Red Hat Enterprise Linux Client Optional (v. 7) kde-settings-minimal-19-23.10.el7_7, kdelibs-apidocs-6:4.14.8-11.el7_7, kdelibs-devel-6:4.14.8-11.el7_7
- Red Hat Enterprise Linux ComputeNode (v. 7) kde-settings-19-23.10.el7_7, kdelibs-6:4.14.8-11.el7_7, kdelibs-common-6:4.14.8-11.el7_7 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kde-settings-ksplash-19-23.10.el7_7, kde-settings-minimal-19-23.10.el7_7, kde-settings-plasma-19-23.10.el7_7 +3
- Red Hat Enterprise Linux Server (v. 7) kde-settings-19-23.10.el7_7, kde-settings-ksplash-19-23.10.el7_7, kde-settings-plasma-19-23.10.el7_7 +6
- Red Hat Enterprise Linux Server Optional (v. 7) kde-settings-19-23.10.el7_7, kde-settings-ksplash-19-23.10.el7_7, kde-settings-minimal-19-23.10.el7_7 +10
- Red Hat Enterprise Linux Workstation (v. 7) kde-settings-19-23.10.el7_7, kde-settings-ksplash-19-23.10.el7_7, kde-settings-plasma-19-23.10.el7_7 +6
- Red Hat Enterprise Linux Workstation Optional (v. 7) kde-settings-minimal-19-23.10.el7_7, kdelibs-apidocs-6:4.14.8-11.el7_7
Fixes 1 record
Priority MEDIUM 41
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.04069 · Published 2019-08-07 · Partial fix CWE-78
