Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 10: 2009-9427 Moderate: Kdenetwork KSSL Issue Fix

fedora
Calendar Grey September 15, 2009
Dist Fedora Esm H88
Upgrading to KDE 4.3.1 offers enhancements, language options, and fixes for security vulnerabilities for Fedora 10 users.
This updates KDE to 4.3.1, the latest upstream bugfix release

Summary

Networking applications, including:

* kget: downloader manager

* kopete: chat client

* kppp: dialer and front end for pppd

* krdc: a client for Desktop Sharing and other VNC servers* krfb: Desktop Sharing server, allow others to access your desktop via VNC

Update Information:

This updates KDE to 4.3.1, the latest upstream bugfix release. The main improvements are: * KDE 4.3 is now also available in Croatian. * A crash when editing toolbar setup has been fixed. * Support for transferring files through SSH using KIO::Fish has been fixed. * A number of bugs in KWin, KDE's window and compositing manager has been fixed. * A large number of bugs in KMail, KDE's email client are now gone. See https://kde.org/announcements/announce-4.3.1/ for more information. In addition, this update: * fixes a potential security issue (CVE-2009-2702) with certificate validation in the KIO KSSL code. It is believed that the affected code is not actually used (the code in Qt, for which a security update was already issued, is) and thus the issue is only potential, but KSSL is being patched just in case, * splits PolicyKit-kde out of kdebase-workspace again to avoid forcing it onto GNOME-based setups, where PolicyKit-gnome is desired instead (#519654).

Topics%20covered

Topics Covered

security advisory Fedora moderate severity KDE update network application Kdenetwork certificate issue

Change Log

* Fri Aug 28 2009 Than Ngo - 4.3.1-1 - 4.3.1 * Mon Aug 24 2009 Than Ngo - 4.3.0-2 - fix bz#515586, backport patch to fix this issue * Thu Jul 30 2009 Than Ngo - 4.3.0-1 - 4.3.0 * Wed Jul 22 2009 Than Ngo - 4.2.98-1 - 4.3rc3 * Sat Jul 11 2009 Than Ngo - 4.2.96-1 - 4.3rc2 * Fri Jun 26 2009 Than Ngo - 4.2.95-1 - 4.3rc1 * Thu Jun 25 2009 Rex Dieter - 4.2.90-3 - BR: kdelibs-experimental * Thu Jun 25 2009 Kevin Kofler - 4.2.90-2 - implement YMSG 16 protocol to allow logging into Yahoo! again (upstream patch) * Thu Jun 4 2009 Rex Dieter - 4.2.90-1 - KDE-4.3 beta2 (4.2.90) * Wed May 13 2009 Lukáš Tinkl - 4.2.85-1 - KDE 4.3 beta 1 * Wed Apr 1 2009 Rex Dieter - 4.2.2-2 - optimize scriptlets * Tue Mar 31 2009 Lukáš Tinkl - 4.2.2-1 - KDE 4.2.2 * Fri Feb 27 2009 Than Ngo - 4.2.1-1 - 4.2.1 * Wed Feb 25 2009 Fedora Release Engineering - 7:4.2.0-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Sat Feb 21 2009 Tejas Dinkar - 4.2.0-8 - Added patch to add View History to Kopete (backport from trunk) * Tue Feb 17 2009 Lorenzo Villani - 7:4.2.0-7 - Make GCC 4.4 happy (patch) * Tue Feb 17 2009 Lorenzo Villani - 7:4.2.0-6 - adjust patch level * Tue Feb 17 2009 Lorenzo Villani - 7:4.2.0-5 - KPPP Crash fix backported patch (KDE BZ: #176645 - BZ: #485890) * Fri Feb 6 2009 Than Ngo - 4.2.0-4 - fix yahoo protocol to show contact list correctly * Wed Feb 4 2009 Jaroslav Reznik - 4.2.0-3 - port kopete video to libv4l (#475623) * Mon Jan 26 2009 Jaroslav Reznik - 4.2.0-2 - fix kopete jabber protocol encrypted messages handling (#473412) * Thu Jan 22 2009 Than Ngo - 4.2.0-1 - 4.2.0 * Fri Jan 16 2009 Kevin Kofler 4.1.96-3 - rebuild for new OpenSSL * Mon Jan 12 2009 Kevin Kofler 4.1.96-2 - build against system libgadu (trivial patch backported from 4.3) * Wed Jan 7 2009 Than Ngo - 4.1.96-1 - 4.2rc1 * Fri Dec 12 2008 Than Ngo 4.1.85-1 - 4.2beta2 - BR: libmsn-devel * Thu Dec 11 2008 Rex Dieter 7:4.1.80-7 - Obsoletes/Provides: kopete-bonjour (#451302) * Thu Dec 4 2008 Kevin Kofler 7:4.1.80-6 - rebuild for fixed kde-filesystem (macros.kde4) (get rid of rpaths) * Thu Dec 4 2008 Kevin Kofler 7:4.1.80-5 - add missing BR meanwhile-devel (#474592) - add missing BR ortp-devel and speex-devel (for Jingle protocol) * Mon Dec 1 2008 Rex Dieter 7:4.1.80-4 - fix up %description - versioned Obsoletes - scriptlets fixes - BR: plasma-devel * Fri Nov 28 2008 Lorenzo Villani 7:4.1.80-3 - fix build (updated file lists) * Thu Nov 20 2008 Than Ngo 4.1.80-2 - merged * Thu Nov 20 2008 Lorenzo Villani 7:4.1.72-1 - 4.1.80 - BR cmake 2.6 - make install/fast * Wed Nov 12 2008 Than Ngo 4.1.3-1 - 4.1.3

References


[ 1 ] Bug #520661 - CVE-2009-2702 kdelibs: kssl incorrect verification of SSL certificate with NUL in subjectAltName https://bugzilla.redhat.com/show_bug.cgi?id=520661

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update kdenetwork' at the command line. For more information, refer to "Managing Software with yum", available at .

Name: kdenetwork
Product: Fedora 10
Version: 4.3.1
Release: 1.fc10
URL: https://kde.org/
Summary: K Desktop Environment - Network Applications

Topics%20covered

Topics Covered

security advisory Fedora moderate severity KDE update network application Kdenetwork certificate issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here