Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 10 kde-l10n-4.3.1-2 Moderate: KIO Certificate Validation Issue

fedora
Calendar Grey September 15, 2009
Dist Fedora Esm H88
Patch resolves possible vulnerability in KIO KSSL framework for KDE on Fedora 10, boosts reliability and introduces new functionalities.
This updates KDE to 4.3.1, the latest upstream bugfix release

Summary

Internationalization support for KDE

Update Information:

This updates KDE to 4.3.1, the latest upstream bugfix release. The main improvements are: * KDE 4.3 is now also available in Croatian. * A crash when editing toolbar setup has been fixed. * Support for transferring files through SSH using KIO::Fish has been fixed. * A number of bugs in KWin, KDE's window and compositing manager has been fixed. * A large number of bugs in KMail, KDE's email client are now gone. See https://kde.org/announcements/announce-4.3.1/ for more information. In addition, this update: * fixes a potential security issue (CVE-2009-2702) with certificate validation in the KIO KSSL code. It is believed that the affected code is not actually used (the code in Qt, for which a security update was already issued, is) and thus the issue is only potential, but KSSL is being patched just in case, * splits PolicyKit-kde out of kdebase-workspace again to avoid forcing it onto GNOME-based setups, where PolicyKit-gnome is desired instead (#519654).

Topics%20covered

Topics Covered

security advisory moderate Fedora certificate validation KIO issue

Change Log

* Sat Sep 5 2009 Than Ngo - 4.3.1-2 - add missing Croatian localization * Fri Aug 28 2009 Than Ngo - 4.3.1-1 - 4.3.1 * Thu Jul 30 2009 Than Ngo - 4.3.0-1 - 4.3.0 * Fri Jul 24 2009 Fedora Release Engineering - 4.2.98-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Wed Jul 22 2009 Than Ngo - 4.2.98-1 - 4.3rc3 * Tue Jul 14 2009 Than Ngo - 4.2.96-1 - 4.3rc2 * Tue Jul 7 2009 Tom "spot" Callaway - 4.2.95-2 - fix duplicate directory ownership (/usr/share/locale/*/LC_MESSAGES) * Tue Jun 30 2009 Than Ngo - 4.2.95-1 - 4.3rc1 * Tue May 19 2009 Lukáš Tinkl - 4.2.85-1 - KDE 4.3 beta 1 * Tue Mar 31 2009 Lukáš Tinkl - 4.2.2-1 - KDE 4.2.2 * Fri Feb 27 2009 Than Ngo - 4.2.1-1 - 4.2.1 * Wed Feb 25 2009 Fedora Release Engineering - 4.2.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Fri Jan 30 2009 Than Ngo - 4.2.0-2 - enable he * Thu Jan 22 2009 Than Ngo - 4.2.0-1 - 4.2.0 * Sat Jan 10 2009 Than Ngo - 4.1.96-2 - remove debug * Wed Jan 7 2009 Than Ngo - 4.1.96-1 - 4.2rc1 * Fri Dec 12 2008 Than Ngo - 4.1.85-1 - 4.2beta2 * Fri Nov 21 2008 Than Ngo 4.1.80-1 - 4.2 beta1

References


[ 1 ] Bug #520661 - CVE-2009-2702 kdelibs: kssl incorrect verification of SSL certificate with NUL in subjectAltName https://bugzilla.redhat.com/show_bug.cgi?id=520661

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update kde-l10n' at the command line. For more information, refer to "Managing Software with yum", available at .

Name: kde-l10n
Product: Fedora 10
Version: 4.3.1
Release: 2.fc10
URL: https://kde.org/
Summary: Internationalization support for KDE

Topics%20covered

Topics Covered

security advisory moderate Fedora certificate validation KIO issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here