2017-05-20
ALT-BU-2017-3129-1
Branch p8 update bulletin.
Package kde5-smb4k updated to version 2.0.1-alt1.M80P.1 for branch p8 in task 183142.
Closed vulnerabilities
Published: 2017-05-17
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2017-8849
smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service.
Severity: HIGH (7.8)
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References:
- DSA-3951
- DSA-3951
- [oss-security] 20170510 generic kde LPE
- [oss-security] 20170510 generic kde LPE
- 98690
- 98690
- 98737
- 98737
- https://bugzilla.redhat.com/show_bug.cgi?id=1449656
- https://bugzilla.redhat.com/show_bug.cgi?id=1449656
- https://cgit.kde.org/smb4k.git/commit/?id=71554140bdaede27b95dbe4c9b5a028a83c83cce
- https://cgit.kde.org/smb4k.git/commit/?id=71554140bdaede27b95dbe4c9b5a028a83c83cce
- https://cgit.kde.org/smb4k.git/commit/?id=a90289b0962663bc1d247bbbd31b9e65b2ca000e
- https://cgit.kde.org/smb4k.git/commit/?id=a90289b0962663bc1d247bbbd31b9e65b2ca000e
- GLSA-201705-14
- GLSA-201705-14
- 42053
- 42053
- https://www.kde.org/info/security/advisory-20170510-2.txt
- https://www.kde.org/info/security/advisory-20170510-2.txt