Fedora Core 2: 2005-063 Moderate Update for Kdelibs Command Injection

Libraries for the K Desktop Environment:

KDE Libraries included: kdecore (KDE core library), kdeui (user interface),

kfm (file manager), khtmlw (HTML widget), kio (Input/Output, networking),

kspell (spelling checker), jscript (javascript), kab (addressbook),

kimgio (image manipulation).

- Applied patch to fix ftp kioslave command injection, CAN-2004-1165

* Tue Dec 21 2004 Than Ngo 3.2.2-11.FC2

- apply the patch to fix Konqueror Java Vulnerability, CAN-2004-1145

Thanks to KDE security team

0efe71b0d35e297f239e6376b2452a3f SRPMS/kdelibs-3.2.2-12.FC2.src.rpm

78f769500b2ec6dac3d6bd61b1e02d1f x86_64/kdelibs-3.2.2-12.FC2.x86_64.rpm

8d9e4b771b96e053cce9992f285bb5f1

x86_64/kdelibs-devel-3.2.2-12.FC2.x86_64.rpm

d16eed0092332a4d06d430087e6a1390

x86_64/debug/kdelibs-debuginfo-3.2.2-12.FC2.x86_64.rpm

a55363ab580be24758250f05d4aeb486 i386/kdelibs-3.2.2-12.FC2.i386.rpm

6f8be5db61a8bace97586a93df0c9b69 i386/kdelibs-devel-3.2.2-12.FC2.i386.rpm

cfee4e7a8411b7902c6e75c90a2fe153

i386/debug/kdelibs-debuginfo-3.2.2-12.FC2.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com