Gentoo Project

KDE Project

Security Bug Reports

• app-text/poppler: multiple vulnerabilities (CVE-2019-{9543,9545})

  679292 - Assigned to Gentoo Security
• <x11-misc/sddm-0.18.1-r6: Privilege escalation (CVE-2020-28049)

  753104 - Assigned to Gentoo Security
• <media-gfx/exiv2-0.27.4: Multiple vulnerabilities (CVE-2021-{29457,29458,29470,29473,29463,29464,29623,31291,31292,32617})

  785646 - Assigned to Gentoo Security
• <kde-frameworks/kimageformats-5.82.0: Stack buffer overflow (CVE-2021-36083)

  799425 - Assigned to Gentoo Security
• <dev-libs/libuv-1.41.1, <net-libs/nodejs-{12.22.2:0/12, 14.17.2:0/14, 16.4.1:0/16): out of bounds read

  800986 - Assigned to Gentoo Security
• <media-gfx/exiv2-0.27.5: multiple vulnerabilities

  807346 - Assigned to Gentoo Security
• <kde-apps/kdepim-runtime-21.08.3, <kde-apps/kimap-21.08.3-r1, <kde-apps/ksmtp-21.08.3-r1, <kde-apps/kmailtransport-21.08.3-r2: STARTTLS preference not respected (CVE-2021-38373)

  807355 - Assigned to Gentoo Security
• <net-libs/libssh-0.9.6: Heap buffer overflow (CVE-2021-3634)

  810517 - Assigned to Gentoo Security
• <kde-frameworks/ktexteditor-5.90.0-r2: Missing validation of binaries executed by QProcess

  832447 - Assigned to Gentoo Security
• <app-text/poppler-22.05.0: DoS in Hints::Hints

  843149 - Assigned to Gentoo Security
• <net-libs/libssh-0.10.5: Multiple vulnerabilities

  905746 - Assigned to Gentoo Security