FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-18 11:12:36 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
f5f0a640-bae8-11e9-bb3a-001e2a3f778d	KDE Frameworks -- malicious .desktop files execute code The KDE Community has released a security announcement: The syntax Key[$e]=$(shell command) in *.desktop files, .directory files, and configuration files (typically found in ~/.config) was an intentional feature of KConfig, to allow flexible configuration. This could however be abused by malicious people to make the users install such files and get code executed even without intentional action by the user. Discovery 2019-08-07 Entry 2019-08-09 kf5-kconfig < 5.60.0_2 CVE-2019-14744 https://kde.org/info/security/advisory-20190807-1.txt

VuXML ID

Description

f5f0a640-bae8-11e9-bb3a-001e2a3f778d

KDE Frameworks -- malicious .desktop files execute code

The KDE Community has released a security announcement:

The syntax Key[$e]=$(shell command) in *.desktop files, .directory files, and configuration files (typically found in ~/.config) was an intentional feature of KConfig, to allow flexible configuration. This could however be abused by malicious people to make the users install such files and get code executed even without intentional action by the user.

Discovery 2019-08-07
Entry 2019-08-09
kf5-kconfig

< 5.60.0_2

CVE-2019-14744
https://kde.org/info/security/advisory-20190807-1.txt