sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] KDE Security Advisory : update on http://www.kde.org/info/security/advisory-20050421-1.txt

From: Thomas Houssin <Thomas.Houssin AT gmail.com>
To: sm-security AT lists.ibiblio.org
Subject: [SM-Security] KDE Security Advisory : update on http://www.kde.org/info/security/advisory-20050421-1.txt
Date: Sat, 21 May 2005 17:07:41 +0200

Synopsis
========
The patches released by the previous KDE security updates were faulty
and introduced regressions.

Background
==========
KDE is a powerful Free Software graphical desktop environment for Linux
and Unix workstations. It combines ease of use, contemporary
functionality, and outstanding graphical design with the technological
superiority of the Unix operating system.

Description
===========

>From http://www.kde.org/info/security/advisory-20050504-1.txt :

The patches released by the previous KDE security updates were faulty
and introduced regressions. The updated patches below correct the
introduced problems.

The Kimgio patch broke reading of .rgb images in most cases due to a
fence-post error.

The Kommander patch was incorrect and still allowed execution of files
served from /tmp.

Affected packages
=================
kdelibs and kdewebdev in all grimoires are affected.
This is now fixed in devel, test, stable-rc and stable grimoire.

Resolution
==========
All kde users should upgrade to the latest available version:
#scribe update
#cast -c kdelibs kdewebdev

--
Thomas Houssin

Security Team Lead : Source Mage GNU/Linux http://www.sourcemage.org
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: signature.asc
Description: OpenPGP digital signature

[SM-Security] KDE Security Advisory : update on http://www.kde.org/info/security/advisory-20050421-1.txt, Thomas Houssin, 05/21/2005