Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2019:2141
HistoryAug 30, 2019 - 3:07 a.m.

kcm_colors, kde, kdeclassic, kdelibs, kgreeter, khotkeys, kinfocenter, kmag, kmenuedit, ksysguard, ksysguardd, kwin, libkworkspace, oxygen, plasma, qt, virtuoso security update

2019-08-3003:07:33
CentOS Project
lists.centos.org
77

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.005 Low

EPSS

Percentile

77.1%

JSON

CentOS Errata and Security Advisory CESA-2019:2141

The K Desktop Environment (KDE) is a graphical desktop environment for the X Window System. The kdelibs packages include core libraries for the K Desktop Environment.

The kde-workspace packages consist of components providing the KDE graphical desktop environment.

Security Fix(es):

  • kde-workspace: Missing sanitization of notifications allows to leak client IP address via IMG element (CVE-2018-6790)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-cr-announce/2019-August/032195.html
https://lists.centos.org/pipermail/centos-cr-announce/2019-August/032196.html
https://lists.centos.org/pipermail/centos-cr-announce/2019-August/032197.html
https://lists.centos.org/pipermail/centos-cr-announce/2019-August/032201.html
https://lists.centos.org/pipermail/centos-cr-announce/2019-August/032448.html

Affected packages:
kcm_colors
kde-settings
kde-settings-ksplash
kde-settings-minimal
kde-settings-plasma
kde-settings-pulseaudio
kde-style-oxygen
kde-workspace
kde-workspace-devel
kde-workspace-ksplash-themes
kde-workspace-libs
kdeclassic-cursor-theme
kdelibs
kdelibs-apidocs
kdelibs-common
kdelibs-devel
kdelibs-ktexteditor
kgreeter-plugins
khotkeys
khotkeys-libs
kinfocenter
kmag
kmenuedit
ksysguard
ksysguard-libs
ksysguardd
kwin
kwin-gles
kwin-gles-libs
kwin-libs
libkworkspace
oxygen-cursor-themes
plasma-scriptengine-python
plasma-scriptengine-ruby
qt-settings
virtuoso-opensource
virtuoso-opensource-utils

Upstream details at:
https://access.redhat.com/errata/RHSA-2019:2141

OSVersionArchitecturePackageVersionFilename
CentOS7i686kdelibs< 4.14.8-10.el7kdelibs-4.14.8-10.el7.i686.rpm
CentOS7x86_64kdelibs< 4.14.8-10.el7kdelibs-4.14.8-10.el7.x86_64.rpm
CentOS7noarchkdelibs-apidocs< 4.14.8-10.el7kdelibs-apidocs-4.14.8-10.el7.noarch.rpm
CentOS7x86_64kdelibs-common< 4.14.8-10.el7kdelibs-common-4.14.8-10.el7.x86_64.rpm
CentOS7i686kdelibs-devel< 4.14.8-10.el7kdelibs-devel-4.14.8-10.el7.i686.rpm
CentOS7x86_64kdelibs-devel< 4.14.8-10.el7kdelibs-devel-4.14.8-10.el7.x86_64.rpm
CentOS7i686kdelibs-ktexteditor< 4.14.8-10.el7kdelibs-ktexteditor-4.14.8-10.el7.i686.rpm
CentOS7x86_64kdelibs-ktexteditor< 4.14.8-10.el7kdelibs-ktexteditor-4.14.8-10.el7.x86_64.rpm
CentOS7noarchkde-settings< 19-23.9.el7.centoskde-settings-19-23.9.el7.centos.noarch.rpm
CentOS7noarchkde-settings-ksplash< 19-23.9.el7.centoskde-settings-ksplash-19-23.9.el7.centos.noarch.rpm
Rows per page:
1-10 of 481

Related

cvelist 1
redhat 1
cve 1
ubuntucve 1
osv 1
redhatcve 1
nessus 8
oraclelinux 1
veracode 1
nvd 1
debiancve 1
prion 1
suse 2
fedora 1
openvas 2
gentoo 1
cvelist
cvelist
CVE-2018-6790
2018-02-07 02:00:00
redhat
redhat
(RHSA-2019:2141) Low: kde-workspace security and bug fix update
2019-08-06 08:05:47
cve
cve
CVE-2018-6790
2018-02-07 02:29:01
ubuntucve
ubuntucve
CVE-2018-6790
2018-02-07 00:00:00
osv
osv
CVE-2018-6790
2018-02-07 02:29:01
redhatcve
redhatcve
CVE-2018-6790
2018-02-08 13:49:23
nessus
nessus
CentOS 7 : kde-settings / kde-workspace / kdelibs / kmag / virtuoso-opensource (CESA-2019:2141)
2019-08-30 00:00:00
Scientific Linux Security Update : kde-workspace on SL7.x x86_64 (20190806)
2019-08-27 00:00:00
Oracle Linux 7 : kde-workspace (ELSA-2019-2141)
2023-09-07 00:00:00
oraclelinux
oraclelinux
kde-workspace security and bug fix update
2019-08-13 00:00:00
veracode
veracode
Information Disclosure
2019-08-08 00:07:52
nvd
nvd
CVE-2018-6790
2018-02-07 02:29:01
debiancve
debiancve
CVE-2018-6790
2018-02-07 02:29:01
prion
prion
Code injection
2018-02-07 02:29:00
suse
suse
Security update for plasma5-workspace (important)
2018-02-08 12:17:28
Security update for plasma5-workspace (important)
2018-02-08 12:18:05
fedora
fedora
[SECURITY] Fedora 26 Update: plasma-workspace-5.10.5-6.fc26
2018-02-20 16:41:08
openvas
openvas
openSUSE: Security Advisory for plasma5-workspace (openSUSE-SU-2018:0397-1)
2018-02-10 00:00:00
Fedora Update for plasma-workspace FEDORA-2018-337757e11f
2018-02-21 00:00:00
gentoo
gentoo
KDE Plasma Workspaces: Multiple vulnerabilities
2018-03-19 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.005 Low

EPSS

Percentile

77.1%

JSON
Related for CESA-2019:2141
cvelist1redhat1cve1ubuntucve1osv1redhatcve1nessus8oraclelinux1veracode1nvd1debiancve1prion1suse2fedora1openvas2gentoo1