Multiple vulnerabilities have been discovered in KDE Libraries, the worst of which could lead to man-in-the-middle attacks.
|Package||kde-base/kdelibs on all architectures|
|Affected versions||< 4.12.5-r1|
|Unaffected versions||>= 4.12.5-r1|
KDE is a feature-rich graphical desktop environment for Linux and Unix-like operating systems. KDE Libraries contains libraries needed by all KDE applications.
Multiple vulnerabilities have been discovered in KDE Libraries. Please review the CVE identifiers referenced below for details.
A remote attacker could cause a man-in-the-middle attack via any certificate issued by a legitimate certification authority. Furthermore, a local attacker may gain knowledge of user passwords through an information leak.
There is no known workaround at this time.
All KDE users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=kde-base/kdelibs-4.12.5-r1"