Stay Secure with the Latest Linux Advisories

security advisorymoderatefedora

Fedora Core 3: FEDORA-2004-552 Moderate: Konqueror Window Injection

apply the patch to fix Konqueror Window Injection Vulnerability #142510 CAN-2004-1158, Thanks to KDE security team. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2004-551 2004-12-15 ---------------------------------------------------------------------Product : Fedora Core 3 Name : kdebase Version : 3.3.1 Release : 4.3.FC3 Summary : K Desktop Environment - core files Description : Core applications for the K Desktop Environment. Included are: kdm (replacement for xdm), kwin (window manager), konqueror (filemanager, web browser, ftp client, ...), konsole (xterm replacement), kpanel (application starter and desktop pager), kaudio (audio server), kdehelp (viewer for kde help files, info and man pages), kthememgr (system for managing alternate theme packages) plus other KDE components (kcheckpass, kikbd, kscreensaver, kcontrol, kfind, kfontmanager, kmenuedit). ---------------------------------------------------------------------* Tue Dec 14 2004 Than Ngo 6:3.3.1-4.3.FC3 - apply the patch to fix Konqueror Window Injection Vulnerability #142510 CAN-2004-1158, Thanks to KDE security team * Fri Dec 10 2004 Than Ngo 6:3.3.1-4.2.FC3 - Security Advisory: plain text password exposure, thanks to KDE security team - the existing icon is lost, add patch to fix this problem #140196 - add patch to fix kfind hang on search #137582 - rebuild against samba-3.0.9 #139894 - add CVS patch to fix konqueror crash by dragging some text over the navigation panel - fix rpm conflict - apply patch number 86 - add patch to fix man page problem konqueror, thanks to Andy Shevchenko ---------------------------------------------------------------------This update can be downloaded from: a05c751d27d38dc2f54f297987ec96d8 SRPMS/kdebase-3.3.1-4.3.FC3.src.rpm d531ea7c518cf744983b7c75b69a3137 x86_64/kdebase-3.3.1-4.3.FC3.x86_64.rpm 252f98e2cf2f65fd190ac78631c9f65a x86_64/kdebase-devel-3.3.1-4.3.FC3.x86_64.rpm 703790e302b58087da97f032cb6e11fd x86_64/debug/kdebase-debuginfo-3.3.1-4.3.FC3.x86_64.rpm e827539910597bf6168f3ce0a526fc2f x86_64/kdebase-3.3.1-4.3.FC3.i386.rpm e827539910597bf6168f3ce0a526fc2f i386/kdebase-3.3.1-4.3.FC3.i386.rpm 6fc187ec61495e12ed30bfaf8480b44f i386/kdebase-devel-3.3.1-4.3.FC3.i386.rpm 3805e0b6ea438763b5af399dfa362da8 i386/debug/kdebase-debuginfo-3.3.1-4.3.FC3.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. -----------------------------------------------------------------------fedora-announce-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Solutions addressing the Konqueror Window Injection vulnerability within Fedora Core 3 are outlined in this security notice.. Konqueror Patch, Fedora Core 3, KDE Applications Security. . LinuxSecurity.com Team

Dec 15, 2004 Fedora