ALT-BU-2019-3861-1
Branch p9 update bulletin.
Closed vulnerabilities
BDU:2019-03649
Уязвимость библиотеки Kconfig среды рабочего стола KDE, позволяющая нарушителю получить несанкционированный доступ к информации, вызвать отказ в обслуживании или оказать воздействие на доступность информации
Modified: 2024-11-21
CVE-2019-14744
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.
- openSUSE-SU-2019:1851
- openSUSE-SU-2019:1851
- openSUSE-SU-2019:1855
- openSUSE-SU-2019:1855
- openSUSE-SU-2019:1898
- openSUSE-SU-2019:1898
- http://packetstormsecurity.com/files/153981/Slackware-Security-Advisory-kdelibs-Updates.html
- http://packetstormsecurity.com/files/153981/Slackware-Security-Advisory-kdelibs-Updates.html
- RHSA-2019:2606
- RHSA-2019:2606
- https://gist.githubusercontent.com/zeropwn/630832df151029cb8f22d5b6b9efaefb/raw/64aa3d30279acb207f787ce9c135eefd5e52643b/kde-kdesktopfile-command-injection.txt
- https://gist.githubusercontent.com/zeropwn/630832df151029cb8f22d5b6b9efaefb/raw/64aa3d30279acb207f787ce9c135eefd5e52643b/kde-kdesktopfile-command-injection.txt
- [debian-lts-announce] 20190818 [SECURITY] [DLA 1890-1] kde4libs security update
- [debian-lts-announce] 20190818 [SECURITY] [DLA 1890-1] kde4libs security update
- FEDORA-2019-a746ac9c89
- FEDORA-2019-a746ac9c89
- FEDORA-2019-f9f78895c3
- FEDORA-2019-f9f78895c3
- FEDORA-2019-9f2ee52c88
- FEDORA-2019-9f2ee52c88
- FEDORA-2019-48b691092f
- FEDORA-2019-48b691092f
- FEDORA-2019-39d23c7a94
- FEDORA-2019-39d23c7a94
- 20190812 [SECURITY] [DSA 4494-1] kconfig security update
- 20190812 [SECURITY] [DSA 4494-1] kconfig security update
- 20190808 [slackware-security] kdelibs (SSA:2019-220-01)
- 20190808 [slackware-security] kdelibs (SSA:2019-220-01)
- GLSA-201908-07
- GLSA-201908-07
- USN-4100-1
- USN-4100-1
- DSA-4494
- DSA-4494
- https://www.zdnet.com/article/unpatched-kde-vulnerability-disclosed-on-twitter/
- https://www.zdnet.com/article/unpatched-kde-vulnerability-disclosed-on-twitter/
Closed vulnerabilities
BDU:2021-05300
Уязвимость программного обеспечения для обеспечения высокой доступности и балансировки нагрузки для TCP и HTTP-приложений Haproxy, связанная с выполнением цикла с недоступным условием выхода, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2019-14241
HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in proto_htx.c.