DSA-4116-1 plasma-workspace -- plasma-workspaceID: oval:org.secpod.oval:def:603274 | Date: (C)2018-02-28 (M)2023-04-19 |
Class: PATCH | Family: unix |
Krzysztof Sieluzycki discovered that the notifier for removable devices in the KDE Plasma workspace performed insufficient sanitisation of FAT/VFAT volume labels, which could result in the execution of arbitrary shell commands if a removable device with a malformed disk label is mounted.
Product: |
libweather-ion7 |
libkworkspace5-5 |
sddm-theme-debian-breeze |
sddm-theme-breeze |
libplasma-geolocation-interface5 |
libtaskmanager6 |
plasma-workspace |