{"id":"CVE-2019-14744","aliases":["DEBIAN-CVE-2019-14744","DLA-1890-1","DSA-4494-1","EUVD-2019-5884","GHSA-7r6x-j8mj-9g3p","MGASA-2019-0278","MGASA-2019-0378","OESA-2021-1295","RHSA-2019:2606","RHSA-2020:2833","UBUNTU-CVE-2019-14744","USN-4100-1","openSUSE-SU-2019:1851-1","openSUSE-SU-2019:1851-2","openSUSE-SU-2019:1855-1","openSUSE-SU-2019:1898-1","openSUSE-SU-2024:10889-1"],"status":"published","title":"In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to...","description":"In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.04069,"percentile":0.9075,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-78"],"published":"2019-08-07T00:00:00Z","modified":"2026-10-24T14:13:08Z","fixes":[{"ecosystem":"Debian:12","package":"kconfig","fixed_in":["5.54.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"kconfig","fixed_in":["5.54.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"kconfig","fixed_in":["5.54.0-2"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"kde4libs","fixed_in":["4:4.14.2-5+deb8u3"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"kconfig","fixed_in":["5.28.0-2+deb9u1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"kconfig","fixed_in":["5.54.0-1+deb10u1"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"kconfig","fixed_in":["5.42.0-1.1.mga6"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"kconfig","fixed_in":["5.57.0-1.1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"kdelibs4","fixed_in":["4.14.38-7.1.mga7"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"kf5-kconfig","fixed_in":["5.55.0-3.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"kde-settings","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"kde-settings-ksplash","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"kde-settings-plasma","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"kde-settings-pulseaudio","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-common","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-debuginfo","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-ktexteditor","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"qt-settings","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"kde-settings-minimal","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-apidocs","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-devel","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kde-settings","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-common","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-debuginfo","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-ktexteditor","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"qt-settings","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kde-settings-ksplash","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kde-settings-minimal","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kde-settings-plasma","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kde-settings-pulseaudio","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-apidocs","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-devel","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"kde-settings","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"kde-settings-ksplash","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"kde-settings-plasma","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"kde-settings-pulseaudio","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-common","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-debuginfo","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-devel","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-ktexteditor","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"qt-settings","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"kde-settings-minimal","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-apidocs","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kde-settings","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kde-settings-ksplash","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kde-settings-plasma","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kde-settings-pulseaudio","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-common","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-debuginfo","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-devel","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-ktexteditor","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qt-settings","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kde-settings-minimal","fixed_in":["0:19-23.10.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-apidocs","fixed_in":["6:4.14.8-11.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"kdelibs","fixed_in":["6:4.14.8-8.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"kdelibs-common","fixed_in":["6:4.14.8-8.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"kdelibs-debuginfo","fixed_in":["6:4.14.8-8.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"kdelibs-ktexteditor","fixed_in":["6:4.14.8-8.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"kdelibs-apidocs","fixed_in":["6:4.14.8-8.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"kdelibs-devel","fixed_in":["6:4.14.8-8.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"kdelibs","fixed_in":["6:4.14.8-8.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"kdelibs-common","fixed_in":["6:4.14.8-8.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"kdelibs-debuginfo","fixed_in":["6:4.14.8-8.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"kdelibs-devel","fixed_in":["6:4.14.8-8.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"kdelibs-ktexteditor","fixed_in":["6:4.14.8-8.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"kdelibs-apidocs","fixed_in":["6:4.14.8-8.el7_6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"kde4libs","fixed_in":["4:4.13.3-0ubuntu0.5+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"kconfig","fixed_in":["5.18.0-0ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"kde4libs","fixed_in":["4:4.14.16-0ubuntu3.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"kconfig","fixed_in":["5.44.0-0ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"kde4libs","fixed_in":["4:4.14.38-0ubuntu3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12 SP1","package":"kconfig","fixed_in":["5.55.0-bp151.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12 SP1","package":"kdelibs4","fixed_in":["4.14.38-bp151.9.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12 SP1","package":"kdelibs4-apidocs","fixed_in":["4.14.38-bp151.9.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12 SP2","package":"kconfig","fixed_in":["5.55.0-bp151.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12 SP2","package":"kdelibs4","fixed_in":["4.14.38-bp151.9.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12 SP2","package":"kdelibs4-apidocs","fixed_in":["4.14.38-bp151.9.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12 SP3","package":"kconfig","fixed_in":["5.55.0-bp151.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12 SP3","package":"kdelibs4","fixed_in":["4.14.38-bp151.9.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12 SP3","package":"kdelibs4-apidocs","fixed_in":["4.14.38-bp151.9.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15","package":"kconfig","fixed_in":["5.55.0-bp151.3.5.1","5.45.0-bp150.3.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15","package":"kdelibs4","fixed_in":["4.14.38-bp151.9.5.1","4.14.38-bp150.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15","package":"kdelibs4-apidocs","fixed_in":["4.14.38-bp151.9.5.1","4.14.38-bp150.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP1","package":"kconfig","fixed_in":["5.55.0-bp151.3.5.1","5.55.0-bp151.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP1","package":"kdelibs4","fixed_in":["4.14.38-bp151.9.5.1","4.14.38-bp151.9.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP1","package":"kdelibs4-apidocs","fixed_in":["4.14.38-bp151.9.5.1","4.14.38-bp151.9.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"kconfig","fixed_in":["5.55.0-bp151.3.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"kdelibs4","fixed_in":["4.14.38-bp151.9.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"kdelibs4-apidocs","fixed_in":["4.14.38-bp151.9.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"kconfig","fixed_in":["5.55.0-bp151.3.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"kdelibs4","fixed_in":["4.14.38-bp151.9.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"kdelibs4-apidocs","fixed_in":["4.14.38-bp151.9.5.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54.0-2"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"kde4libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.14.2-5+deb8u3"}]}],"versions":["4:4.14.2-5","4:4.14.2-5+deb8u1","4:4.14.2-5+deb8u2"]},{"source":"osv","ecosystem":"Debian:9","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.28.0-2+deb9u1"}]}],"versions":["5.28.0-2"]},{"source":"osv","ecosystem":"Debian:10","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54.0-1+deb10u1"}]}],"versions":["5.54.0-1"]},{"source":"osv","ecosystem":"Mageia:6","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.42.0-1.1.mga6"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.57.0-1.1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-7.1.mga7"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"kf5-kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55.0-3.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kde-settings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kde-settings-ksplash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kde-settings-plasma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kde-settings-pulseaudio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-ktexteditor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"qt-settings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kde-settings-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kde-settings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-ktexteditor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"qt-settings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kde-settings-ksplash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kde-settings-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kde-settings-plasma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kde-settings-pulseaudio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kde-settings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kde-settings-ksplash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kde-settings-plasma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kde-settings-pulseaudio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-ktexteditor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"qt-settings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kde-settings-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kde-settings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kde-settings-ksplash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kde-settings-plasma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kde-settings-pulseaudio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-ktexteditor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qt-settings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kde-settings-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19-23.10.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-11.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-8.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"kdelibs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-8.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-8.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"kdelibs-ktexteditor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-8.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"kdelibs-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-8.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-8.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-8.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"kdelibs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-8.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-8.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-8.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"kdelibs-ktexteditor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-8.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"kdelibs-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-8.el7_6"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"kde4libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.13.3-0ubuntu0.5+esm1"}]}],"versions":["4:4.11.2-0ubuntu2","4:4.11.2-0ubuntu3","4:4.11.2-0ubuntu4","4:4.11.80-0ubuntu1","4:4.11.95-0ubuntu1","4:4.11.97-0ubuntu1","4:4.11.97-0ubuntu2","4:4.12.0-0ubuntu1","4:4.12.1-0ubuntu1","4:4.12.2-0ubuntu1","4:4.12.2-0ubuntu2","4:4.12.3-0ubuntu1","4:4.12.90-0ubuntu1","4:4.12.95-0ubuntu1","4:4.12.97-0ubuntu1","4:4.13.0-0ubuntu1","4:4.13.0-0ubuntu1.1","4:4.13.1-0ubuntu0.1","4:4.13.1-0ubuntu0.2","4:4.13.2a-0ubuntu0.2","4:4.13.2a-0ubuntu0.3","4:4.13.3-0ubuntu0.1","4:4.13.3-0ubuntu0.2","4:4.13.3-0ubuntu0.3","4:4.13.3-0ubuntu0.4","4:4.13.3-0ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.0-0ubuntu1.1"}]}],"versions":["5.15.0-0ubuntu1","5.15.0-0ubuntu2","5.18.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"kde4libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.14.16-0ubuntu3.3"}]}],"versions":["4:4.14.13-0ubuntu1","4:4.14.13-0ubuntu2","4:4.14.13-0ubuntu3","4:4.14.13-0ubuntu4","4:4.14.13-0ubuntu6","4:4.14.16-0ubuntu1","4:4.14.16-0ubuntu3","4:4.14.16-0ubuntu3.1","4:4.14.16-0ubuntu3.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.44.0-0ubuntu1.1"}]}],"versions":["5.38.0-0ubuntu1","5.40.0-0ubuntu1","5.41.0-0ubuntu1","5.42.0-0ubuntu1","5.43.0-0ubuntu1","5.44.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"kde4libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.14.38-0ubuntu3.1"}]}],"versions":["4:4.14.34-0ubuntu2","4:4.14.38-0ubuntu2","4:4.14.38-0ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.0-0ubuntu1.1"}]}],"versions":["5.15.0-0ubuntu1","5.15.0-0ubuntu2","5.18.0-0ubuntu1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"kde4libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.14.16-0ubuntu3.3"}]}],"versions":["4:4.14.13-0ubuntu1","4:4.14.13-0ubuntu2","4:4.14.13-0ubuntu3","4:4.14.13-0ubuntu4","4:4.14.13-0ubuntu6","4:4.14.16-0ubuntu1","4:4.14.16-0ubuntu3","4:4.14.16-0ubuntu3.1","4:4.14.16-0ubuntu3.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.44.0-0ubuntu1.1"}]}],"versions":["5.38.0-0ubuntu1","5.40.0-0ubuntu1","5.41.0-0ubuntu1","5.42.0-0ubuntu1","5.43.0-0ubuntu1","5.44.0-0ubuntu1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"kde4libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.14.38-0ubuntu3.1"}]}],"versions":["4:4.14.34-0ubuntu2","4:4.14.38-0ubuntu2","4:4.14.38-0ubuntu3"],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP1","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55.0-bp151.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP1","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP1","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP2","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55.0-bp151.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP2","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP2","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP3","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55.0-bp151.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP3","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP3","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55.0-bp151.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55.0-bp151.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55.0-bp151.3.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55.0-bp151.3.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP1","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55.0-bp151.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP1","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP1","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP2","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55.0-bp151.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP2","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP2","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP3","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55.0-bp151.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP3","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP3","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55.0-bp151.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55.0-bp151.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55.0-bp151.3.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55.0-bp151.3.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.45.0-bp150.3.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp150.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp150.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"kconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55.0-bp151.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.38-bp151.9.8.1"}]}]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"kde","product":"kconfig"},{"vendor":"opensuse","product":"backports_sle"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"https://gist.githubusercontent.com/zeropwn/630832df151029cb8f22d5b6b9efaefb/raw/64aa3d30279acb207f787ce9c135eefd5e52643b/kde-kdesktopfile-command-injection.txt","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://www.zdnet.com/article/unpatched-kde-vulnerability-disclosed-on-twitter/","tags":["x_refsource_MISC","x_transferred","Press/Media Coverage","Third Party Advisory","advisory","report"]},{"url":"https://seclists.org/bugtraq/2019/Aug/9","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://packetstormsecurity.com/files/153981/Slackware-Security-Advisory-kdelibs-Updates.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","VDB Entry","fix"]},{"url":"https://www.debian.org/security/2019/dsa-4494","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://seclists.org/bugtraq/2019/Aug/12","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTFBQRJAU7ITD3TOMPZAUQMYYCAZ6DTX/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00013.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00016.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IRIKH7ZWXELIQT6WSLV7EG3VTFWKZPD/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00034.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201908-07","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/08/msg00023.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNHO6FZRYBQ2R3UCFDGS66F6DNNTKCMM/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UYKLUSSEK3YJOVQDL6K2LKGS3354UH6L/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4100-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YIDXQ6CUB5E7Y3MJWCUY4VR42QAE6SCJ/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2606","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14744","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5IRIKH7ZWXELIQT6WSLV7EG3VTFWKZPD/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNHO6FZRYBQ2R3UCFDGS66F6DNNTKCMM/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UYKLUSSEK3YJOVQDL6K2LKGS3354UH6L/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTFBQRJAU7ITD3TOMPZAUQMYYCAZ6DTX/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YIDXQ6CUB5E7Y3MJWCUY4VR42QAE6SCJ/"},{"url":"https://github.com/advisories/GHSA-7r6x-j8mj-9g3p"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-14744","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0278.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25250","tags":["report"]},{"url":"https://kde.org/info/security/advisory-20190807-1.txt","tags":["advisory","article","report"]},{"url":"https://advisories.mageia.org/MGASA-2019-0378.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25403","tags":["report"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1295","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1740042","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1740138","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2606.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14744","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14744","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2833","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2833.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-14744","tags":["report"]},{"url":"https://phabricator.kde.org/D22979","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4100-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-6232","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NUT64UDNW74IDXCK3DKVBYT7T2GAOQ4A/#NUT64UDNW74IDXCK3DKVBYT7T2GAOQ4A","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1144600","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14744","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZQO5EYPXIVZ5HZPEQ377KQFRRENZNQJI/#ZQO5EYPXIVZ5HZPEQ377KQFRRENZNQJI","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3PV6Z3TCAM4W7P2QXLK2LD7IRGXUU5R7/#3PV6Z3TCAM4W7P2QXLK2LD7IRGXUU5R7","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JRL77WXMC2B6FM2K6QCBCXRGCZBFJF3O/#JRL77WXMC2B6FM2K6QCBCXRGCZBFJF3O","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-14744","description":"In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.","status":"published","published":"2019-08-07T14:30:35Z","modified":"2024-08-05T00:26:38.664Z","updated_at":"2026-11-02T14:20:17.722148Z"}],"euvd":[{"id":"EUVD-2019-5884","description":"In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.","status":"published","published":"2019-08-07T14:30:35Z","modified":"2024-08-05T00:26:38Z","updated_at":"2026-11-03T02:40:38.622868Z"}],"ghsa":[{"id":"GHSA-7r6x-j8mj-9g3p","title":"In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to...","description":"In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.","status":"published","published":"2022-05-24T16:52:49Z","modified":"2023-03-08T05:05:36Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:54:17.182344Z"}],"nvd":[{"id":"CVE-2019-14744","description":"In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.","status":"published","published":"2019-08-07T15:15:13.97Z","modified":"2026-06-17T02:18:55.4Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:05:22.878504Z"}],"osv":[{"id":"CVE-2019-14744","description":"In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.","status":"published","published":"2019-08-07T15:15:13.97Z","modified":"2026-10-24T14:13:08.507033398Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:11.029493Z"},{"id":"DEBIAN-CVE-2019-14744","description":"In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.","status":"published","published":"2019-08-07T15:15:13.97Z","modified":"2026-09-21T07:02:40.605298247Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.467893Z"},{"id":"OESA-2021-1295","title":"kf5-kconfig security update","description":"KDE Frameworks 5 Tier 1 addon with advanced configuration system made of two parts: KConfigCore and KConfigGui.\r\n\r\nSecurity Fix(es):\r\n\r\nIn KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.(CVE-2019-14744)","status":"published","published":"2021-07-31T11:04:32Z","modified":"2026-08-18T01:15:49.271046738Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2019:2606","title":"Red Hat Security Advisory: kdelibs and kde-settings security and bug fix update","status":"published","published":"2024-09-16T02:47:25Z","modified":"2026-06-27T10:08:02Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2020:2833","title":"Red Hat Security Advisory: kdelibs security update","status":"published","published":"2024-09-16T02:47:31Z","modified":"2026-06-27T10:10:38Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"UBUNTU-CVE-2019-14744","description":"In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.","status":"published","published":"2019-08-07T00:00:00Z","modified":"2026-04-22T12:11:08.971398Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:19.6877Z"},{"id":"DLA-1890-1","title":"kde4libs - security update","status":"published","published":"2019-08-18T00:00:00Z","modified":"2026-03-09T01:22:24.559203Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-4494-1","title":"kconfig - security update","status":"published","published":"2019-08-09T00:00:00Z","modified":"2026-03-09T02:10:00.492468Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2019-0278","title":"Updated kconfig packages fix security vulnerability","description":"Updated kconfig packages fix security vulnerability:\n\nDominik Penner discovered that KConfig supported a feature to define shell\ncommand execution in .desktop files. If a user is provided with a malformed\n.desktop file (e.g. if it's embedded into a downloaded archive and it gets\nopened in a file browser) arbitrary commands could get executed\n(CVE-2019-14744).\n\nThis update fixes the security issue by removing the shell command feature.\n","status":"published","published":"2019-09-15T14:45:31Z","modified":"2026-04-16T04:41:47.522396343Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"MGASA-2019-0378","title":"Updated kdelibs4 packages fix security vulnerability","description":"kdelibs: malicious desktop files and configuration files lead to code execution\nwith minimal user interaction (CVE-2019-14744).\n","status":"published","published":"2019-12-13T18:25:24Z","modified":"2026-04-16T04:43:34.912812135Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2019:1851-1","title":"Security update for kconfig, kdelibs4","description":"This update for kconfig, kdelibs4 fixes the following issues:\n\n- CVE-2019-14744: Fixed a command execution by an shell expansion (boo#1144600).\n","status":"published","published":"2019-08-13T09:06:54Z","modified":"2025-05-07T18:10:40.922707Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:1851-2","title":"Security update for kconfig, kdelibs4","description":"This update for kconfig, kdelibs4 fixes the following issues:\n\n- CVE-2019-14744: Fixed a command execution by an shell expansion (boo#1144600).\n","status":"published","published":"2019-08-13T09:06:54Z","modified":"2026-02-04T03:47:44.969206Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:1855-1","title":"Security update for kconfig, kdelibs4","description":"This update for kconfig, kdelibs4 fixes the following issues:\n\n- CVE-2019-14744: Fixed a command execution by an shell expansion (boo#1144600).\n\nThis update was imported from the openSUSE:Leap:15.0:Update update project.","status":"published","published":"2019-08-13T12:48:43Z","modified":"2026-02-04T04:02:29.731868Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:1898-1","title":"Security update for kconfig, kdelibs4","description":"This update for kconfig, kdelibs4 fixes the following issues:\n\n- CVE-2019-14744: Fixed a command execution by an shell expansion (boo#1144600).\n\nThis update was imported from the openSUSE:Leap:15.1:Update update project.","status":"published","published":"2019-08-15T08:55:39Z","modified":"2026-02-04T02:37:48.230126Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:10889-1","title":"kconf_update5-5.86.0-1.2 on GA media","description":"These are all security issues fixed in the kconf_update5-5.86.0-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:34:06.187643Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"USN-4100-1","title":"kconfig, kde4libs vulnerabilities","description":"It was discovered that KConfig and KDE libraries have a vulnerability\nwhere an attacker could hide malicious code under desktop and\nconfiguration files. (CVE-2019-14744)\n\nIt was discovered that KConfig allows remote attackers to write to\narbitrary files via a ../ in a filename in an archive file. (CVE-2016-6232)\n","status":"published","published":"2019-08-16T20:47:00Z","modified":"2026-04-22T10:00:33.276458Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}