[ubuntu/disco-security] kde4libs 4:4.14.38-0ubuntu6.1 (Accepted)

Paulo Flabiano Smorigo pfsmorigo at canonical.com
Fri Aug 16 01:00:25 UTC 2019


kde4libs (4:4.14.38-0ubuntu6.1) disco-security; urgency=medium

  * SECURITY UPDATE: malicious .desktop files (and others) would execute
    code (LP: #1839432).
    - debian/patches/CVE-2019-14744.patch: remove support for $(...) in
      config keys with [$e] marker.
    - debian/patches/kdelibs-4.14.38-openssl-1.1.patch: Make kssl compile
      against OpenSSL 1.1.0
    - CVE-2019-14744

Date: 2019-08-15 22:52:21.003562+00:00
Changed-By: Paulo Flabiano Smorigo <pfsmorigo at canonical.com>
https://launchpad.net/ubuntu/+source/kde4libs/4:4.14.38-0ubuntu6.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the Disco-changes mailing list