Summary
[6:4.14.8-6]
- KAuth: verify that whoever is calling us is actually who he says he is (CVE-2017-8422)
Resolves: CVE-2017-8422
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kdelibs | 6:4.14.8-6.el7_3 |
| Oracle Linux · 7 | kdelibs-apidocs | 6:4.14.8-6.el7_3 |
| Oracle Linux · 7 | kdelibs-common | 6:4.14.8-6.el7_3 |
| Oracle Linux · 7 | kdelibs-devel | 6:4.14.8-6.el7_3 |
| Oracle Linux · 7 | kdelibs-ktexteditor | 6:4.14.8-6.el7_3 |
Vulnerabilities 1
-
Unscored —CVE-2017-8422 Public exploit
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and l…