[Bug 1839432] Re: [CVE] malicious .desktop files (and others) would execute code
Launchpad Bug Tracker
1839432 at bugs.launchpad.net
Fri Aug 16 01:00:08 UTC 2019
This bug was fixed in the package kde4libs - 4:4.14.16-0ubuntu3.3
kde4libs (4:4.14.16-0ubuntu3.3) xenial-security; urgency=medium
* SECURITY UPDATE: Directory traversal vulnerability.
- debian/patches/CVE-2016-6232.patch: extraction location to be in
* SECURITY UPDATE: malicious .desktop files (and others) would execute
code (LP: #1839432).
- debian/patches/CVE-2019-14744.patch: remove support for $(...) in
config keys with [$e] marker.
-- Paulo Flabiano Smorigo <pfsmorigo at canonical.com> Mon, 12 Aug 2019
You received this bug notification because you are a member of Kubuntu
Bugs, which is subscribed to kde4libs in Ubuntu.
[CVE] malicious .desktop files (and others) would execute code
To manage notifications about this bug go to:
More information about the kubuntu-bugs