KDE Libraries: Multiple vulnerabilities Multiple vulnerabilities have been discovered in KDE Libraries, the worst of which could lead to man-in-the-middle attacks. kdelibs 2014-06-29 2014-06-29 358025 384227 469140 513726 local, remote 4.12.5-r1 4.12.5-r1

KDE is a feature-rich graphical desktop environment for Linux and Unix-like operating systems. KDE Libraries contains libraries needed by all KDE applications.

Multiple vulnerabilities have been discovered in KDE Libraries. Please review the CVE identifiers referenced below for details.

A remote attacker could cause a man-in-the-middle attack via any certificate issued by a legitimate certification authority. Furthermore, a local attacker may gain knowledge of user passwords through an information leak.

There is no known workaround at this time.

All KDE users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=kde-base/kdelibs-4.12.5-r1" CVE-2011-1094 CVE-2011-3365 CVE-2013-2074 CVE-2014-3494 BlueKnight K_F