Search for packages
Package details: pkg:deb/debian/kconfig@5.54.0-1%2Bdeb10u1
purl pkg:deb/debian/kconfig@5.54.0-1%2Bdeb10u1
Next non-vulnerable version 5.78.0-4
Latest non-vulnerable version 5.78.0-4
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-ezms-uxg1-aaar
Aliases:
CVE-2019-14744
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.
5.78.0-4
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-ezms-uxg1-aaar In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file. CVE-2019-14744

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T15:21:29.265109+00:00 Debian Oval Importer Fixing VCID-ezms-uxg1-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T02:35:44.830594+00:00 Debian Oval Importer Affected by VCID-ezms-uxg1-aaar None 36.1.3
2025-06-20T21:59:34.780540+00:00 Debian Oval Importer Fixing VCID-ezms-uxg1-aaar None 36.1.3
2025-06-08T08:15:43.587633+00:00 Debian Oval Importer Fixing VCID-ezms-uxg1-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T19:59:57.001224+00:00 Debian Oval Importer Affected by VCID-ezms-uxg1-aaar None 36.1.0
2025-06-07T15:23:06.048085+00:00 Debian Oval Importer Fixing VCID-ezms-uxg1-aaar None 36.1.0
2025-04-12T20:06:30.149939+00:00 Debian Oval Importer Affected by VCID-ezms-uxg1-aaar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-08T06:47:19.958766+00:00 Debian Oval Importer Fixing VCID-ezms-uxg1-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T18:37:49.981583+00:00 Debian Oval Importer Affected by VCID-ezms-uxg1-aaar None 36.0.0
2025-04-07T13:54:26.415715+00:00 Debian Oval Importer Fixing VCID-ezms-uxg1-aaar None 36.0.0