https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T00:53:26.553203+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2016-6232 CVE-2016-6232 2026-10-09T00:53:26.673413+00:00

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ (dot dot slash) in a filename in an archive file, related to KNewsstuff downloads.

 https://vulnerability.circl.lu/vuln/usn-3042-1 USN-3042-1 — kde4libs vulnerability 2026-10-09T00:53:26.673619+00:00

Affected: Ubuntu:14.04:LTS: kde4libs

Andreas Cord-Landwehr discovered that KDE-Libs incorrectly handled extracting certain archives. If a user were tricked into extracting a specially-crafted archive, a remote attacker could use this issue to overwrite arbitrary files out of the extraction directory.