FEDORA-2018-337757e11f — security update for plasma-workspace

stable

plasma-workspace-5.10.5-6.fc26

FEDORA-2018-337757e11f created by rdieter 8 years ago for Fedora 26

Fix for CVE-2018-6790 CVE-2018-6791, backport crashfix for xembedsniproxy

Logout Required

After installing this update it is required that you logout of your current user session and log back in to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-337757e11f

This update has been submitted for testing by rdieter.

8 years ago

This update has been pushed to testing.

8 years ago

samoht0 commented & provided feedback 8 years ago

karma

media notification and mounting in Plasma working fine; no regressions spotted

This update has been submitted for batched by rdieter.

8 years ago

This update has been submitted for stable by bodhi.

8 years ago

This update has been pushed to stable.

8 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-4

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

Builds

plasma-workspace-5.10.5-6.fc26

BZ#1484918 [abrt] plasma-workspace: SNIProxy::getImageNonComposite(): xembedsniproxy killed by signal 11

BZ#1540144 [abrt] plasma-workspace: SNIProxy::getImageNonComposite(): xembedsniproxy killed by SIGSEGV

BZ#1543454 CVE-2018-6790 kde-workspace: Missing sanitization of notifications allows to leak client IP address via IMG element

BZ#1543457 CVE-2018-6791 kde-runtime: Arbitrary command execution in the removable device notifier

BZ#1543471 CVE-2018-6790 CVE-2018-6791 plasma-workspace: various flaws [fedora-all]

plasma-workspace-5.10.5-6.fc26

Automated Test Results

passed