[UCI-Linux] [SECURITY] Fedora Core 3 Update: kdenetwork-3.3.1-3.2

Mike Iglesias IGLESIAS at uci.edu
Fri Jul 22 10:23:20 PDT 2005

From: than at redhat.com
To: fedora-announce-list at redhat.com
Date: Fri, 22 Jul 2005 13:07:34 -0400
Subject: [SECURITY] Fedora Core 3 Update: kdenetwork-3.3.1-3.2

Fedora Update Notification

Product     : Fedora Core 3
Name        : kdenetwork
Version     : 3.3.1                      
Release     : 3.2                  
Summary     : K Desktop Environment - Network Applications
Description :
Networking applications for the K Desktop Environment.

Update Information:

Multiple integer overflow flaws were found in the way Kopete processes
Gadu-Gadu messages. A remote attacker could send a specially crafted
Gadu-Gadu message which would cause Kopete to crash or possibly execute
arbitrary code. The Common Vulnerabilities and Exposures project
assigned the name CAN-2005-1852 to this issue.

Users of Kopete should update to these packages which contain a
patch to correct this issue. 
* Thu Jul 21 2005 Than Ngo <than at redhat.com> 7:3.3.1-3.2 
- fix crash in kopete
- apply patch to fix libgadu vulnerabilities #163811, CVE CAN-2005-1852
  thank to kde security team
- backport patch to fix annoying problem with registration
  dialog not able to register/retrieve token due to network problems.

This update can be downloaded from:

4a3c668ec29fb8e773fc7e4a04b16c80  SRPMS/kdenetwork-3.3.1-3.2.src.rpm
41070969d93975e7b1647aee7824138a  x86_64/kdenetwork-3.3.1-3.2.x86_64.rpm
021329dba0ce68dbc5f29317a6bf62e0  x86_64/kdenetwork-devel-3.3.1-3.2.x86_64.rpm
06e171725e200cde00ce1122a263c9db  x86_64/kdenetwork-nowlistening-3.3.1-3.2.x86_64.rpm
2241fd0dd7c68cf97b8f9939299ee621  x86_64/debug/kdenetwork-debuginfo-3.3.1-3.2.x86_64.rpm
4a2cb2ac7181f4ffa6394b87cf029603  i386/kdenetwork-3.3.1-3.2.i386.rpm
56eac72b061cdf77a0df1be6f562ffb1  i386/kdenetwork-devel-3.3.1-3.2.i386.rpm
da519edd88340600a98aea322f31dcf5  i386/kdenetwork-nowlistening-3.3.1-3.2.i386.rpm
eb1c027b4bb2bfeb40c8082e356f29e6  i386/debug/kdenetwork-debuginfo-3.3.1-3.2.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  

fedora-announce-list mailing list
fedora-announce-list at redhat.com

More information about the UCI-Linux mailing list