UbuntuUpdates.org

Package "libknewstuff2-4"

Name: libknewstuff2-4

Description:

"Get Hot New Stuff" v2 Library for the KDE Platform

Latest version: 4:4.14.38-0ubuntu3.1
Release: bionic (18.04)
Level: security
Repository: universe
Head package: kde4libs
Homepage: http://www.kde.org/

Links


Download "libknewstuff2-4"


Other versions of "libknewstuff2-4" in Bionic

Repository Area Version
base universe 4:4.14.38-0ubuntu3
updates universe 4:4.14.38-0ubuntu3.1

Changelog

Version: 4:4.14.38-0ubuntu3.1 2019-08-16 02:06:37 UTC

  kde4libs (4:4.14.38-0ubuntu3.1) bionic-security; urgency=medium

  * SECURITY UPDATE: malicious .desktop files (and others) would execute
    code (LP: #1839432).
    - debian/patches/CVE-2019-14744.patch: remove support for $(...) in
      config keys with [$e] marker.
    - CVE-2019-14744

 -- Paulo Flabiano Smorigo <email address hidden> Mon, 12 Aug 2019 12:04:10 -0300

1839432 [CVE] malicious .desktop files (and others) would execute code
CVE-2019-14744 In KDE Frameworks KConfig before 5.61.0, malicious desktop files and c ...



About   -   Send Feedback to @ubuntu_updates