Security
Security
Multiple vulnerabilities have been discovered in KDE Libraries, the worst of which could lead to man-in-the-middle attacks.
| Package | kde-base/kdelibs on all architectures |
|---|---|
| Affected versions | < 4.12.5-r1 |
| Unaffected versions | >= 4.12.5-r1 |
KDE is a feature-rich graphical desktop environment for Linux and Unix-like operating systems. KDE Libraries contains libraries needed by all KDE applications.
Multiple vulnerabilities have been discovered in KDE Libraries. Please review the CVE identifiers referenced below for details.
A remote attacker could cause a man-in-the-middle attack via any certificate issued by a legitimate certification authority. Furthermore, a local attacker may gain knowledge of user passwords through an information leak.
There is no known workaround at this time.
All KDE users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=kde-base/kdelibs-4.12.5-r1"