In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kdelibs-ktexteditorUpgrade kde-settings-ksplashUpgrade kde-settings-plasmaUpgrade kde-settings-minimalUpgrade kdelibsUpgrade kdelibs-develUpgrade kdelibs-debuginfoUpgrade qt-settingsUpgrade kde-settingsUpgrade kde-settings-pulseaudioUpgrade kdelibs-commonUpgrade kdelibs-apidocs | Sep 4, 2019 | Aug 7, 2019 |
| Debian | — | Upgrade kconfig | Aug 13, 2019 | Aug 7, 2019 |
| Freebsd | — | Upgrade kf5-kconfig | Aug 10, 2019 | Aug 9, 2019 |
| Gentoo Linux | — | Upgrade kde-frameworks/kconfig. | Aug 16, 2019 | Aug 7, 2019 |
| Oracle_linux | — | Upgrade kde-settings-pulseaudioUpgrade kdelibs-develUpgrade kdelibs-ktexteditorUpgrade kde-settings-plasmaUpgrade qt-settingsUpgrade kde-settingsUpgrade kdelibsUpgrade kde-settings-minimalUpgrade kdelibs-commonUpgrade kde-settings-ksplashUpgrade kdelibs-apidocs | Sep 4, 2019 | Aug 12, 2019 |
| Redhat_linux | — | Upgrade kde-settings-ksplashUpgrade kdelibsUpgrade kdelibs-develUpgrade qt-settingsUpgrade kde-settingsUpgrade kdelibs-commonUpgrade kdelibs-debuginfoUpgrade kdelibs-ktexteditorUpgrade kde-settings-minimalUpgrade kdelibs-apidocsUpgrade kde-settings-plasmaUpgrade kde-settings-pulseaudio | Sep 4, 2019 | Aug 7, 2019 |
| Suse | — | Upgrade kdelibs4Upgrade kconfig-devel-32bitUpgrade libkde4-64bitUpgrade libkde4-32bitUpgrade libksuseinstall-develUpgrade libKF5ConfigGui5-64bitUpgrade libKF5ConfigCore5-64bitUpgrade libkdecore4-64bitUpgrade libKF5ConfigCore5Upgrade kdelibs4-branding-upstreamUpgrade libKF5ConfigGui5-32bitUpgrade kdelibs4-coreUpgrade libKF5ConfigCore5-langUpgrade libkdecore4Upgrade libksuseinstall1-64bitUpgrade libksuseinstall1-32bitUpgrade kconfig-develUpgrade libKF5ConfigCore5-32bitUpgrade libkde4Upgrade kconf_update5Upgrade kdelibs4-docUpgrade libkdecore4-32bitUpgrade libkdecore4-develUpgrade kdelibs4-apidocsUpgrade libkde4-develUpgrade libksuseinstall1Upgrade libKF5ConfigGui5Upgrade kconfig-devel-64bit | Aug 14, 2019 | Aug 7, 2019 |
| Ubuntu | — | Upgrade libkdecore5Upgrade libkf5configcore5 | Aug 20, 2019 | Aug 7, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub