KDE Security Advisories

Reporting

Please send security concerns and findings about software produced by KDE to security@kde.org.

Please send security concerns and findings about software used but not produced by KDE (e.g. gitlab, bugzilla, etc.) to sysadmin@kde.org.

If you are under active threat of interception, and the information you desire to transmit is exceedingly sensitive, you may send it to one of individual team members listed below using PGP, who may then choose to forward the message to other team members or take other appropriate action, as determined by the security team recipient. However, due to time constraints, you are far more likely to receive a prompt response by contacting security@kde.org.

NameEmailPGP Key
David Edmundsondavidedmundson@kde.orgD07BD8662C56CB291B316EB2F5675605C74E02CF
Albert Astals Cidaacid@kde.org8692A42FB1A8B666C51053919D17D97FD8224750
Jason A. Donenfeldjdonenfeld@kde.org3C16CDE0E58B28C80A5A361DC3BD4FF850130054

Reported security problems are handled according to the KDE Security Policy.

Advisories

The KDE Security Advisories are crosslinked in the KDE Information Pages of the KDE versions to which they apply to. The listing below is in chronological order.