Gentoo Project

KDE Project

Security Bug Reports

• app-text/poppler: multiple vulnerabilities (CVE-2019-{9543,9545})

  679292 - Assigned to Gentoo Security
• <kde-frameworks/kimageformats-5.82.0: Stack buffer overflow (CVE-2021-36083)

  799425 - Assigned to Gentoo Security
• <kde-apps/kdepim-runtime-21.08.3, <kde-apps/kimap-21.08.3-r1, <kde-apps/ksmtp-21.08.3-r1, <kde-apps/kmailtransport-21.08.3-r2: STARTTLS preference not respected (CVE-2021-38373)

  807355 - Assigned to Gentoo Security
• <app-text/poppler-22.05.0: DoS in Hints::Hints

  843149 - Assigned to Gentoo Security
• <dev-libs/libuv-1.48.0: hostname truncation in getaddrinfo allows attacker-controlled lookup results

  924127 - Assigned to Gentoo Security
• <kde-apps/konqueror-23.08.5-r1: HTML Thumbnailer automatic remote file access

  933344 - Assigned to Gentoo Security
• <media-gfx/exiv2-0.28.3: out of bounds read in AsfVideo::streamProperties

  942164 - Assigned to Gentoo Security