Gentoo Project

KDE Project

Security Bug Reports

• app-text/poppler: multiple vulnerabilities (CVE-2019-{9543,9545})

  679292 - Assigned to Gentoo Security
• <kde-frameworks/kimageformats-5.82.0: Stack buffer overflow (CVE-2021-36083)

  799425 - Assigned to Gentoo Security
• <kde-apps/kdepim-runtime-21.08.3, <kde-apps/kimap-21.08.3-r1, <kde-apps/ksmtp-21.08.3-r1, <kde-apps/kmailtransport-21.08.3-r2: STARTTLS preference not respected (CVE-2021-38373)

  807355 - Assigned to Gentoo Security
• <app-text/poppler-22.05.0: DoS in Hints::Hints

  843149 - Assigned to Gentoo Security
• <kde-apps/konqueror-23.08.5-r1: HTML Thumbnailer automatic remote file access

  933344 - Assigned to Gentoo Security
• <media-gfx/exiv2-0.28.3: out of bounds read in AsfVideo::streamProperties

  942164 - Assigned to Gentoo Security
• <kde-misc/kdeconnect-24.12.3-r1: multiple vulnerabilities

  955179 - Assigned to Gentoo Security
• <kde-apps/konsole-24.12.3-r1, <kde-apps/konsole-25.04.2: Incorrect telnet scheme handling

  957792 - Assigned to Gentoo Security
• <net-libs/libssh-0.11.2: Multiple vulnerabilities

  959101 - Assigned to Gentoo Security
• <app-text/poppler-25.06.2: Use-after-free due to reference count integer overflow

  959944 - Assigned to Gentoo Security