Fedora Core 3: High Advisory For Kdelibs Command Injection And Java Issues

Libraries for the K Desktop Environment:

KDE Libraries included: kdecore (KDE core library), kdeui (user interface),

kfm (file manager), khtmlw (HTML widget), kio (Input/Output, networking),

kspell (spelling checker), jscript (javascript), kab (addressbook),

kimgio (image manipulation).

- Applied patch to fix ftp kioslave command injection, CAN-2004-1165

* Tue Dec 21 2004 Than Ngo 6:3.3.1-2.5.FC3

- apply the patch to fix Konqueror Java Vulnerability, CAN-2004-1145

Thanks to KDE security team

09041dea148cec9c35af2ad07d3ecf88 SRPMS/kdelibs-3.3.1-2.6.FC3.src.rpm

d9bb548ef27e29639713de00c3f2f864 x86_64/kdelibs-3.3.1-2.6.FC3.x86_64.rpm

4a131abf1fb8bfd68385c6878837243f

x86_64/kdelibs-devel-3.3.1-2.6.FC3.x86_64.rpm

ec20ba48b63ca3e7d031651809806426

x86_64/debug/kdelibs-debuginfo-3.3.1-2.6.FC3.x86_64.rpm

46d5a8953361e01c4b6ab4d08ddb8c9f x86_64/kdelibs-3.3.1-2.6.FC3.i386.rpm

46d5a8953361e01c4b6ab4d08ddb8c9f i386/kdelibs-3.3.1-2.6.FC3.i386.rpm

26f1eb24d0604ddce27bf836f94d6cde i386/kdelibs-devel-3.3.1-2.6.FC3.i386.rpm

dcc826891c032d57875e8b523e82ffca

i386/debug/kdelibs-debuginfo-3.3.1-2.6.FC3.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com