Gentoo Project

KDE Project

Security Bug Reports

• app-text/poppler: multiple vulnerabilities (CVE-2019-{9543,9545})

  679292 - Assigned to Gentoo Security
• <kde-apps/konqueror-23.08.5-r1: HTML Thumbnailer automatic remote file access

  933344 - Assigned to Gentoo Security
• <kde-misc/kdeconnect-24.12.3-r1: multiple vulnerabilities

  955179 - Assigned to Gentoo Security
• <media-gfx/krita-5.2.13: Heap-based buffer overflow when parsing TGA files

  963679 - Assigned to Gentoo Security
• <net-misc/smb4k-4.0.5: Multiple vulnerabilities

  967312 - Assigned to Gentoo Security
• <net-libs/libssh-0.11.4: Multiple vulnerabilities (CVE-2025-14821, CVE-2026-0964, CVE-2026-0965, CVE-2026-0966, CVE-2026-0967, CVE-2026-0968)

  970097 - Assigned to Gentoo Security
• <sys-apps/xdg-desktop-portal-1.20.4: arbitrary trashing of host files

  972436 - Assigned to Gentoo Security
• kde-plasma/plasma-login-manager: Multiple vulnerabilities

  973315 - Assigned to Gentoo Security
• <kde-apps/kdenlive-26.04.1: Remote code execution via malicious project file

  975883 - Assigned to Gentoo Security
• <kde-apps/okular-26.04.0: Multiple vulnerabilities in fax backend

  975884 - Assigned to Gentoo Security
• <kde-misc/kdeconnect-26.04.3-r4, <kde-misc/kdeconnect-26.08.2-r1: Malformed packets can flood D-Bus and freeze the desktop

  985463 - Assigned to Gentoo Security