Vulnerability Bulletins |
DSA-4494 kconfig - security update |
|
| Affected software | Debian |
|
Dominik Penner discovered that KConfig, the KDE configuration settingsframework, supported a feature to define shell command execution in.desktop files. If a user is provided with a malformed .desktop file(e.g. if its embedded into a downloaded archive and it gets opened ina file browser) arbitrary commands could get executed. This updateremoves this feature. More info: https://www.debian.org/security/2019/dsa-4494 |
|