Red Hat Security Advisory

RHSA-2020:2833

kdelibs security update

Released 2020-07-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) kdelibs-6:4.14.8-8.el7_6, kdelibs-common-6:4.14.8-8.el7_6, kdelibs-ktexteditor-6:4.14.8-8.el7_6
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) kdelibs-apidocs-6:4.14.8-8.el7_6, kdelibs-devel-6:4.14.8-8.el7_6
Red Hat Enterprise Linux Server EUS (v. 7.6) kdelibs-6:4.14.8-8.el7_6, kdelibs-common-6:4.14.8-8.el7_6, kdelibs-devel-6:4.14.8-8.el7_6 +1
Red Hat Enterprise Linux Server Optional EUS (v. 7.6) kdelibs-6:4.14.8-8.el7_6, kdelibs-6:4.14.8-8.el7_6.ppc, kdelibs-apidocs-6:4.14.8-8.el7_6 +5
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) kdelibs-6:4.14.8-8.el7_6, kdelibs-common-6:4.14.8-8.el7_6, kdelibs-devel-6:4.14.8-8.el7_6 +1
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) kdelibs-6:4.14.8-8.el7_6, kdelibs-apidocs-6:4.14.8-8.el7_6, kdelibs-common-6:4.14.8-8.el7_6 +2

TI-2019-10956 CVE-2019-14744 · GHSA-7r6x-j8mj-9g3p

MEDIUM 41

In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.04069 Published 2019-08-07 Partial fix CWE-78