Fedora Core 5: KDM Symlink Attack Fix - Severity Moderate

Core applications for the K Desktop Environment. Included are: kdm

(replacement for xdm), kwin (window manager), konqueror (filemanager,

web browser, ftp client, ...), konsole (xterm replacement), kpanel

(application starter and desktop pager), kaudio (audio server),

kdehelp (viewer for kde help files, info and man pages), kthememgr

(system for managing alternate theme packages) plus other KDE

components (kcheckpass, kikbd, kscreensaver, kcontrol, kfind,

kfontmanager, kmenuedit).

- fix BR

* Wed Jun 14 2006 Than Ngo 6:3.5.3-0.2.fc5

- apply patch to to fix #194659, CVE-2006-2449 KDM symlink attack vulnerability

thanks to KDE security team

* Thu Jun 8 2006 Than Ngo 6:3.5.3-0.1.fc5

- update to 3.5.3

* Fri May 12 2006 Than Ngo 6:3.5.2-0.5.fc5

- fix 190836, xmTextFieldClass widgets don't work properly

- fix 186425, KDE Terminal Sessions applet does not display konsole bookmarks

- fix 153202, startkde gets wrong field from space_tmp/space_home with finnish

- fix 191049, KDE screensaver calls PAM incorrectly

- fix 191306, Kde Help Center can't build an index

- fix 192832, konsole crashes on kde logout

896bba233f9890e6110f49b051aa9596349b9449 SRPMS/kdebase-3.5.3-0.3.fc5.src.rpm

896bba233f9890e6110f49b051aa9596349b9449 noarch/kdebase-3.5.3-0.3.fc5.src.rpm

0dd6a6e4ffa1ed5fb2d210aebd568fbb5d8ee46f ppc/kdebase-devel-3.5.3-0.3.fc5.ppc.rpm

787b03c252d36413beaca5fd142945a294c74134 ppc/debug/kdebase-debuginfo-3.5.3-0.3.fc5.ppc.rpm

79ecd17aa8d61a9539c27456dbc2ff9380564c7e ppc/kdebase-3.5.3-0.3.fc5.ppc.rpm

0c5dddf7aaf4a07295ef47545b72623c75a9afa4 x86_64/debug/kdebase-debuginfo-3.5.3-0.3.fc5.x86_64.rpm

8df4db5202c414d2bb07671e04f3fb019c545f72 x86_64/kdebase-3.5.3-0.3.fc5.x86_64.rpm

5b94521424c9c250e5111a34c00ae6afb3de860a x86_64/kdebase-devel-3.5.3-0.3.fc5.x86_64.rpm

06e74bcd46d3be8430af7c40fa66c223117dda80 i386/debug/kdebase-debuginfo-3.5.3-0.3.fc5.i386.rpm

650c9f0743c3d2d20184c5d4b172ad5d7b6ace43 i386/kdebase-devel-3.5.3-0.3.fc5.i386.rpm

41f709681b98480111a2e40c5951747cb2cb86ea i386/kdebase-3.5.3-0.3.fc5.i386.rpm

This update can be installed with the 'yum' update program. Use 'yum update

package-name' at the command line. For more information, refer to 'Managing

Software with yum,' available at .

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/