Bug 290998 - x11/lightdm-kde-greeter: CVE-2025-62876: Privilege Escalation from lightdm Service User to root in KAuth Helper Service
Summary: x11/lightdm-kde-greeter: CVE-2025-62876: Privilege Escalation from lightdm Se...
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Many People
Assignee: freebsd-kde (group)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2025-11-13 13:40 UTC by Ricardo Branco
Modified: 2025-11-13 15:25 UTC (History)
1 user (show)

See Also:
bugzilla: maintainer-feedback? (kde)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Comment 1 commit-hook freebsd_committer freebsd_triage 2025-11-13 15:23:47 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=10ae68a8e8b58a4cb0b5b96b2e9e2a7e87202fbb

commit 10ae68a8e8b58a4cb0b5b96b2e9e2a7e87202fbb
Author:     Max Brazhnikov <makc@FreeBSD.org>
AuthorDate: 2025-11-13 15:22:31 +0000
Commit:     Max Brazhnikov <makc@FreeBSD.org>
CommitDate: 2025-11-13 15:22:39 +0000

    x11/lightdm-kde-greeter: Update to 6.0.4

    fixes CVE-2025-62876

    PR:             290998
    Reported by:    Ricardo Branco

 x11/lightdm-kde-greeter/Makefile  | 5 ++---
 x11/lightdm-kde-greeter/distinfo  | 6 +++---
 x11/lightdm-kde-greeter/pkg-plist | 8 ++++++++
 3 files changed, 13 insertions(+), 6 deletions(-)
Comment 2 commit-hook freebsd_committer freebsd_triage 2025-11-13 15:24:48 UTC 
A commit in branch 2025Q4 references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=7b743b6128bdb3f6c7648a69c7750a5b301f8f71

commit 7b743b6128bdb3f6c7648a69c7750a5b301f8f71
Author:     Max Brazhnikov <makc@FreeBSD.org>
AuthorDate: 2025-11-13 15:22:31 +0000
Commit:     Max Brazhnikov <makc@FreeBSD.org>
CommitDate: 2025-11-13 15:23:54 +0000

    x11/lightdm-kde-greeter: Update to 6.0.4

    fixes CVE-2025-62876

    PR:             290998
    Reported by:    Ricardo Branco

    (cherry picked from commit 10ae68a8e8b58a4cb0b5b96b2e9e2a7e87202fbb)

 x11/lightdm-kde-greeter/Makefile  | 5 ++---
 x11/lightdm-kde-greeter/distinfo  | 6 +++---
 x11/lightdm-kde-greeter/pkg-plist | 8 ++++++++
 3 files changed, 13 insertions(+), 6 deletions(-)
Comment 3 Max Brazhnikov freebsd_committer freebsd_triage 2025-11-13 15:25:35 UTC 
Thank you for report!