An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kmag-debuginfoUpgrade kdelibs-commonUpgrade kwin-glesUpgrade virtuoso-opensource-utilsUpgrade kcm_colorsUpgrade kwinUpgrade plasma-scriptengine-pythonUpgrade kde-workspace-libsUpgrade libkworkspaceUpgrade kdeclassic-cursor-themeUpgrade ksysguard-libsUpgrade qt-settingsUpgrade kde-settings-ksplashUpgrade kgreeter-pluginsUpgrade kmenueditUpgrade kde-style-oxygenUpgrade kwin-gles-libsUpgrade kdelibs-apidocsUpgrade kde-settingsUpgrade virtuoso-opensourceUpgrade kdelibsUpgrade kde-workspace-develUpgrade kdelibs-develUpgrade oxygen-cursor-themesUpgrade kwin-libsUpgrade ksysguardUpgrade kde-settings-minimalUpgrade kde-settings-plasmaUpgrade ksysguarddUpgrade kde-workspaceUpgrade kde-workspace-ksplash-themesUpgrade kdelibs-debuginfoUpgrade virtuoso-opensource-debuginfoUpgrade kinfocenterUpgrade kde-workspace-debuginfoUpgrade plasma-scriptengine-rubyUpgrade khotkeysUpgrade kde-settings-pulseaudioUpgrade kmagUpgrade kdelibs-ktexteditorUpgrade khotkeys-libs | Aug 28, 2019 | Feb 7, 2018 |
| Debian | — | Upgrade plasma-workspace | Jul 30, 2024 | Feb 7, 2018 |
| Gentoo Linux | — | Upgrade kde-plasma/plasma-workspace. | Mar 19, 2018 | Feb 6, 2018 |
| Oracle_linux | — | Upgrade kdeclassic-cursor-themeUpgrade qt-settingsUpgrade ksysguard-libsUpgrade kdelibs-commonUpgrade virtuoso-opensourceUpgrade kmenueditUpgrade kwin-glesUpgrade kwin-gles-libsUpgrade kde-workspace-libsUpgrade kde-style-oxygenUpgrade kwinUpgrade kcm_colorsUpgrade kgreeter-pluginsUpgrade kdelibsUpgrade kde-settingsUpgrade khotkeys-libsUpgrade libkworkspaceUpgrade kde-settings-ksplashUpgrade virtuoso-opensource-utilsUpgrade plasma-scriptengine-pythonUpgrade kde-workspaceUpgrade kde-settings-pulseaudioUpgrade kinfocenterUpgrade kde-settings-minimalUpgrade kde-workspace-develUpgrade kdelibs-apidocsUpgrade ksysguardUpgrade kmagUpgrade plasma-scriptengine-rubyUpgrade kdelibs-develUpgrade ksysguarddUpgrade kwin-libsUpgrade kdelibs-ktexteditorUpgrade kde-workspace-ksplash-themesUpgrade khotkeysUpgrade oxygen-cursor-themesUpgrade kde-settings-plasma | Jul 21, 2020 | Feb 8, 2018 |
| Redhat_linux | — | Upgrade virtuoso-opensource-utilsUpgrade ksysguardUpgrade khotkeys-libsUpgrade kde-settings-ksplashUpgrade plasma-scriptengine-rubyUpgrade kdelibsUpgrade kde-settings-minimalUpgrade kde-settingsUpgrade kgreeter-pluginsUpgrade ksysguarddUpgrade kde-workspace-libsUpgrade kwinUpgrade kwin-libsUpgrade virtuoso-opensourceUpgrade kdeclassic-cursor-themeUpgrade kmagUpgrade kde-workspace-debuginfoUpgrade libkworkspaceUpgrade oxygen-cursor-themesUpgrade kcm_colorsUpgrade kdelibs-apidocsUpgrade kde-workspace-develUpgrade kwin-gles-libsUpgrade kdelibs-ktexteditorUpgrade kdelibs-develUpgrade kde-workspaceUpgrade kwin-glesUpgrade kinfocenterUpgrade kde-workspace-ksplash-themesUpgrade qt-settingsUpgrade plasma-scriptengine-pythonUpgrade ksysguard-libsUpgrade kde-style-oxygenUpgrade kdelibs-commonUpgrade khotkeysUpgrade kde-settings-plasmaUpgrade kmag-debuginfoUpgrade virtuoso-opensource-debuginfoUpgrade kdelibs-debuginfoUpgrade kde-settings-pulseaudioUpgrade kmenuedit | Aug 7, 2019 | Feb 7, 2018 |
| Suse | — | Upgrade plasma5-workspaceUpgrade drkonqi5Upgrade plasma5-workspace-develUpgrade plasma5-workspace-langUpgrade plasma5-workspace-libs | Feb 9, 2018 | Feb 6, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub