The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kdelibs-develUpgrade kdelibsUpgrade kdelibs-apidocs | Dec 1, 2016 | Nov 29, 2011 |
| Freebsd | — | Upgrade kdelibsUpgrade rekonq | Dec 10, 2025 | Oct 23, 2011 |
| Gentoo Linux | — | Upgrade sys-apps/shadow.Upgrade dev-vcs/gitolite.Upgrade dev-util/qt-creator.Upgrade sys-cluster/resource-agents.Upgrade dev-php/PEAR-Mail.Upgrade net-libs/webkit-gtk.Upgrade app-office/gnucash.Upgrade net-libs/libsoup.Upgrade dev-db/unixODBC.Upgrade dev-util/oprofile.Upgrade app-misc/ca-certificates.Upgrade sys-fs/lvm2.Upgrade net-analyzer/sflowtool.Upgrade net-misc/rsync.Upgrade media-libs/xine-lib.Upgrade media-libs/fmod.Upgrade net-misc/mrouted.Upgrade media-sound/lastfmplayer.Upgrade kde-base/kdelibs.Upgrade x11-apps/xrdb.Upgrade gnome-base/gdm.Upgrade games-sports/racer-bin.Upgrade dev-libs/xmlsec.Upgrade dev-php/PEAR-PEAR.Upgrade net-misc/vino.Upgrade app-admin/syslog-ng. | Oct 30, 2017 | Nov 29, 2011 |
| Oracle_linux | — | Upgrade kdelibs-develUpgrade kdelibs3Upgrade kdelibs3-develUpgrade kdelibs3-apidocsUpgrade kdelibsUpgrade kdelibs-apidocsUpgrade kdelibs-common | Oct 16, 2024 | Nov 29, 2011 |
| Suse | — | Upgrade libkdecore4Upgrade libkde4-32bitUpgrade libksuseinstall-develUpgrade kdelibs4Upgrade kdelibs4-branding-upstreamUpgrade libksuseinstall1-32bitUpgrade kdelibs4-docUpgrade libkde4Upgrade libkdecore4-develUpgrade libkdecore4-32bitUpgrade kdelibs4-coreUpgrade libksuseinstall1Upgrade libkde4-devel | Dec 12, 2013 | Nov 29, 2011 |
| Ubuntu | — | Upgrade libkio5Upgrade kdelibs5 | Nov 8, 2024 | Nov 29, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub