Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 11: 2009-8046 Severe: kdelibs3 DoS and Code Execution Fix

fedora
Calendar Grey July 28, 2009
Dist Fedora Esm H88
Addresses major vulnerabilities in KDE kdelibs3 for Fedora 11, mitigating potential DoS attacks and the risk of code execution. Ensure you update promptly for enhanced security.
This update fixes several security issues in the KDE 3 compatibility version of KHTML (CVE-2009-1725, CVE-2009-1690, CVE-2009-1687, CVE-2009-1698, CVE-2009-2537) which may lead to...

Summary

Libraries for the K Desktop Environment 3:

KDE Libraries included: kdecore (KDE core library), kdeui (user interface),

kfm (file manager), khtmlw (HTML widget), kio (Input/Output, networking),

kspell (spelling checker), jscript (javascript), kab (addressbook),

kimgio (image manipulation).

Update Information:

This update fixes several security issues in the KDE 3 compatibility version of KHTML (CVE-2009-1725, CVE-2009-1690, CVE-2009-1687, CVE-2009-1698, CVE-2009-2537) which may lead to a denial of service or potentially even arbitrary code execution. In addition, the package was fixed to build with the latest version of automake.

Topics%20covered

Topics Covered

security advisory security issue Fedora DoS arbitrary code execution critical threat kdelibs3

Change Log

* Sun Jul 26 2009 Kevin Kofler - 3.5.10-13 - fix CVE-2009-2537 - select length DoS - fix CVE-2009-1725 - crash, possible ACE in numeric character references - fix CVE-2009-1690 - crash, possible ACE in KHTML ( use-after-free) - fix CVE-2009-1687 - possible ACE in KJS (FIXME: still crashes?) - fix CVE-2009-1698 - crash, possible ACE in CSS style attribute handling * Fri Jul 24 2009 Fedora Release Engineering - 3.5.10-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Sat Jul 18 2009 Rex Dieter - 3.5.10-12 - FTBFS kdelibs3-3.5.10-11.fc11 (#511571) - -devel: Requires: %{name}%_isa ...

References


[ 1 ] Bug #513813 - CVE-2009-1725: KHTML: improper handling of numeric character references (ACE, DoS) https://bugzilla.redhat.com/show_bug.cgi?id=513813 [ 2 ] Bug #505571 - CVE-2009-1690 kdelibs: KHTML Incorrect handling element content once the element was removed (DoS, ACE) https://bugzilla.redhat.com/show_bug.cgi?id=505571 [ 3 ] Bug #506453 - CVE-2009-1687 kdelibs: Integer overflow in KJS JavaScript garbage collector https://bugzilla.redhat.com/show_bug.cgi?id=506453 [ 4 ] Bug #506469 - CVE-2009-1698 kdelibs: KHTML CSS parser - incorrect handling CSS "style" attribute content (DoS, ACE) https://bugzilla.redhat.com/show_bug.cgi?id=506469 [ 5 ] Bug #512911 - CVE-2009-2537 Konqueror: DoS via large length property of a Select object https://bugzilla.redhat.com/show_bug.cgi?id=512911

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update kdelibs3' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: kdelibs3
Product: Fedora 11
Version: 3.5.10
Release: 13.fc11
URL: https://kde.org/
Summary: K Desktop Environment 3 - Libraries

Topics%20covered

Topics Covered

security advisory security issue Fedora DoS arbitrary code execution critical threat kdelibs3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here