This bug was fixed in the package kde4libs - 4:4.14.16-0ubuntu3.3

kde4libs (4:4.14.16-0ubuntu3.3) xenial-security; urgency=medium

  * SECURITY UPDATE: Directory traversal vulnerability.
    - debian/patches/CVE-2016-6232.patch: extraction location to be in
    - CVE-2016-6232
  * SECURITY UPDATE: malicious .desktop files (and others) would execute
    code (LP: #1839432).
    - debian/patches/CVE-2019-14744.patch: remove support for $(...) in
      config keys with [$e] marker.
    - CVE-2019-14744

 -- Paulo Flabiano Smorigo <>  Mon, 12 Aug 2019
15:09:56 -0300

You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

  [CVE] malicious .desktop files (and others) would execute code

To manage notifications about this bug go to:

ubuntu-bugs mailing list

Reply via email to