Two serious PHP flaws could let an attacker run code without logging in. See which setups and PHP versions are affected ×
This is a pure Qt Quick/Kirigami Qt Quick Controls style.
KDE Plasma 6.8.1 + Gear 28.08.2 (And related rebuilds) CVE-2026-110236 Arbitrary command execution via crafted folder name
* Tue Oct 20 2026 Steve Cossette - 6.8.1-1 - 6.8.1 * Fri Oct 9 2026 Steve Cossette - 6.8.0-1 - 6.8.0 * Thu Sep 24 2026 Steve Cossette - 6.7.91-1 - 6.7.91 * Thu Sep 10 2026 Steve Cossette - 6.7.90-1 - 6.7.90
* Tue Oct 20 2026 Steve Cossette - 6.8.1-1 - 6.8.1 * Fri Oct 9 2026 Steve Cossette - 6.8.0-1 - 6.8.0 * Thu Sep 24 2026 Steve Cossette - 6.7.91-1 - 6.7.91 * Thu Sep 10 2026 Steve Cossette - 6.7.90-1 - 6.7.90
[ 1 ] Bug #2559827 - FE Tracker: Plasma 6.8[.1] + Gear 26.08.2
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-21f4914bca' at the command line. For more information, refer to the dnf documentation available at
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
