Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 10 Critical: kdeplasma-addons 4.3.1 KIO Certificate Fix

fedora
Calendar Grey September 15, 2009
Dist Fedora Esm H88
The recent update for KDE 4.3.1 on Fedora 10 addresses various bugs and enhances security concerning KIO KSSL. Users can easily apply this update using the yum package manager.
This updates KDE to 4.3.1, the latest upstream bugfix release

Summary

Additional plasmoids for KDE.

Update Information:

This updates KDE to 4.3.1, the latest upstream bugfix release. The main improvements are: * KDE 4.3 is now also available in Croatian. * A crash when editing toolbar setup has been fixed. * Support for transferring files through SSH using KIO::Fish has been fixed. * A number of bugs in KWin, KDE's window and compositing manager has been fixed. * A large number of bugs in KMail, KDE's email client are now gone. See https://kde.org/announcements/announce-4.3.1/ for more information. In addition, this update: * fixes a potential security issue (CVE-2009-2702) with certificate validation in the KIO KSSL code. It is believed that the affected code is not actually used (the code in Qt, for which a security update was already issued, is) and thus the issue is only potential, but KSSL is being patched just in case, * splits PolicyKit-kde out of kdebase-workspace again to avoid forcing it onto GNOME-based setups, where PolicyKit-gnome is desired instead (#519654).

Topics%20covered

Topics Covered

security advisory critical software update Fedora KDE KIO certificate fix

Change Log

* Fri Aug 28 2009 Than Ngo - 4.3.1-1 - 4.3.1 * Thu Aug 13 2009 Than Ngo - 4.3.0-9 - omit BR on kdeedu-devel/eigen2-devel for rhel * Fri Aug 7 2009 Ben Boeckel - 4.3.0-8 - Waited for newRepo task * Fri Aug 7 2009 Ben Boeckel - 4.3.0-7 - Rebuild for mising rawhide oxygen-icon-theme - Fix patch comments * Fri Aug 7 2009 Ben Boeckel - 4.3.0-6 - Add patch to fix kde#196809 * Tue Aug 4 2009 Than Ngo - 4.3.0-5 - respin * Mon Aug 3 2009 Rex Dieter - 4.3.0-4 - fix microblog post crasher (kdebug#202364) * Mon Aug 3 2009 Rex Dieter - 4.3.0-3 - -libs subpkg to sanitize multilib * Sun Aug 2 2009 Rex Dieter - 4.3.0-2 - fix to allow updating of status via microblog plasmoid * Thu Jul 30 2009 Than Ngo - 4.3.0-1 - 4.3.0 * Wed Jul 22 2009 Than Ngo - 4.2.98-1 - 4.3rc3 * Thu Jul 16 2009 Rex Dieter - 4.2.96-2 - BR: libXcomposite-devel (lancelot eye-candy) * Sun Jul 12 2009 Than Ngo - 4.2.96-1 - 4.3rc2 * Fri Jun 26 2009 Than Ngo - 4.2.95-1 - 4.3rc1 * Thu Jun 4 2009 Rex Dieter - 4.2.90-1 - KDE-4.3 beta2 (4.2.90) * Mon May 25 2009 Rex Dieter - 4.2.85-4 - BR: eigen2-devel soprano-devel * Tue May 19 2009 Kevin Kofler - 4.2.85-3 - BR kdeedu-devel (for Marble) * Sun May 17 2009 Kevin Kofler - 4.2.85-2 - Obsoletes/Provides: kde-plasma-weather * Wed May 13 2009 Lukáš Tinkl - 4.2.85-1 - KDE 4.3 beta 1 * Thu Apr 30 2009 Rex Dieter - 4.2.2-3 - disable contacts krunner by default * Wed Apr 1 2009 Rex Dieter - 4.2.2-2 - optimize scriptlets * Tue Mar 31 2009 Lukáš Tinkl - 4.2.2-1 - KDE 4.2.2 * Mon Mar 16 2009 Rex Dieter - 4.2.1-3 - make bball applet work, ship .svg instead of .svgz (kdebug#185568) - use new %_qt45 macro - spec housecleaning * Fri Mar 13 2009 Kevin Kofler - 4.2.1-2 - fix Lancelot rendering issues with Qt 4.5 (F11+ only, as the effect of that patch with 4.4.3 is unknown) * Fri Feb 27 2009 Than Ngo - 4.2.1-1 - 4.2.1 * Wed Feb 25 2009 Fedora Release Engineering - 4.2.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Thu Jan 22 2009 Than Ngo - 4.2.0-1 - 4.2.0 * Wed Jan 7 2009 Than Ngo - 4.1.96-1 - 4.2rc1 * Tue Dec 16 2008 Rex Dieter 4.1.85-2 - saner versioned Obsoletes * Fri Dec 12 2008 Than Ngo 4.1.85-1 - 4.2beta2 * Tue Dec 2 2008 Kevin Kofler 4.1.80-3 - BR plasma-devel - add Provides: kde-plasma-lancelot - fix file list - BR libkexiv2-devel >= 0.4.0 on F10+ * Thu Nov 20 2008 Than Ngo 4.1.80-2 - merged - add Obsoletes: kde-plasma-lancelot * Thu Nov 20 2008 Lorenzo Villani - 4.1.80-1 - 4.1.80 - BR cmake >= 2.6.2 - make install/fast * Wed Nov 12 2008 Than Ngo 4.1.3-1 - 4.1.3

References


[ 1 ] Bug #520661 - CVE-2009-2702 kdelibs: kssl incorrect verification of SSL certificate with NUL in subjectAltName https://bugzilla.redhat.com/show_bug.cgi?id=520661

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update kdeplasma-addons' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: kdeplasma-addons
Product: Fedora 10
Version: 4.3.1
Release: 1.fc10
URL: https://kde.org/
Summary: Additional plasmoids for KDE

Topics%20covered

Topics Covered

security advisory critical software update Fedora KDE KIO certificate fix

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here