The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kdelibs-develUpgrade kdelibs-apidocsUpgrade kdelibs | Dec 1, 2016 | Nov 29, 2011 |
| Freebsd | — | Upgrade kdelibsUpgrade rekonq | Dec 10, 2025 | Oct 23, 2011 |
| Gentoo Linux | — | Upgrade games-sports/racer-bin.Upgrade net-misc/mrouted.Upgrade dev-php/PEAR-PEAR.Upgrade dev-libs/xmlsec.Upgrade media-libs/xine-lib.Upgrade net-misc/vino.Upgrade gnome-base/gdm.Upgrade x11-apps/xrdb.Upgrade media-libs/fmod.Upgrade media-sound/lastfmplayer.Upgrade kde-base/kdelibs.Upgrade app-admin/syslog-ng.Upgrade dev-util/qt-creator.Upgrade net-libs/libsoup.Upgrade sys-cluster/resource-agents.Upgrade app-office/gnucash.Upgrade dev-util/oprofile.Upgrade dev-vcs/gitolite.Upgrade net-misc/rsync.Upgrade net-libs/webkit-gtk.Upgrade net-analyzer/sflowtool.Upgrade sys-fs/lvm2.Upgrade dev-php/PEAR-Mail.Upgrade dev-db/unixODBC.Upgrade app-misc/ca-certificates.Upgrade sys-apps/shadow. | Oct 30, 2017 | Nov 29, 2011 |
| Oracle_linux | — | Upgrade kdelibs3Upgrade kdelibs3-develUpgrade kdelibs-develUpgrade kdelibs3-apidocsUpgrade kdelibsUpgrade kdelibs-apidocsUpgrade kdelibs-common | Oct 16, 2024 | Nov 29, 2011 |
| Suse | — | Upgrade libksuseinstall1-32bitUpgrade libkde4-32bitUpgrade libksuseinstall-develUpgrade libkdecore4Upgrade kdelibs4Upgrade kdelibs4-branding-upstreamUpgrade libksuseinstall1Upgrade libkdecore4-32bitUpgrade kdelibs4-docUpgrade libkde4Upgrade libkde4-develUpgrade libkdecore4-develUpgrade kdelibs4-core | Dec 12, 2013 | Nov 29, 2011 |
| Ubuntu | — | Upgrade kdelibs5Upgrade libkio5 | Nov 8, 2024 | Nov 29, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub