FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The last vuln.xml file processed by FreshPorts is:

nothing found there

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
f5f0a640-bae8-11e9-bb3a-001e2a3f778dKDE Frameworks -- malicious .desktop files execute code

The KDE Community has released a security announcement:

The syntax Key[$e]=$(shell command) in *.desktop files, .directory files, and configuration files (typically found in ~/.config) was an intentional feature of KConfig, to allow flexible configuration. This could however be abused by malicious people to make the users install such files and get code executed even without intentional action by the user.


Discovery 2019-08-07
Entry 2019-08-09
kf5-kconfig
lt 5.60.0_2

CVE-2019-14744
https://kde.org/info/security/advisory-20190807-1.txt