[UCI-Linux] [Security] Fedora Core 3 Update: kdelibs-3.3.1-2.12.FC3

Mike Iglesias IGLESIAS at uci.edu
Mon May 2 09:15:28 PDT 2005

From: Than Ngo <than at redhat.com>
To: fedora-announce-list at redhat.com
Date: Mon, 02 May 2005 10:39:03 +0200
Subject: [Security] Fedora Core 3 Update: kdelibs-3.3.1-2.12.FC3

Fedora Update Notification

Product     : Fedora Core 3
Name        : kdelibs
Version     : 3.3.1
Release     : 2.12.FC3
Summary     : K Desktop Environment - Libraries
Description :
Libraries for the K Desktop Environment:
KDE Libraries included: kdecore (KDE core library), kdeui (user interface),
kfm (file manager), khtmlw (HTML widget), kio (Input/Output, networking),
kspell (spelling checker), jscript (javascript), kab (addressbook),
kimgio (image manipulation).
Update Information:

A buffer overflow was found in the kimgio library for KDE 3.3.1. An
attacker could create a carefully crafted PCX image in such a way that it
would cause kimgio to execute arbitrary code when processing the image.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2005-1046 to this issue.

All users of kdelibs should upgrade to these updated packages, which
contain a backported security patch to correct these issues.

* Tue Apr 19 2005 Than Ngo <than at redhat.com> 6:3.3.1-2.12.FC3

- apply patch to fix gcc warning #117938

* Tue Apr 19 2005 Than Ngo <than at redhat.com> 6:3.3.1-2.11.FC3

- add missing kde documents #152307
- apply patch to fix kimgio input validation vulnerabilities, CAN-2005-1046
- add hack for loading of *.so shared object files #142244

* Mon Apr 18 2005 Than Ngo <than at redhat.com> 6:3.3.1-2.10.FC3

- backport the patch to fix kimgio input validation vulnerabilities,
  CAN-2005-1046, #152093, thanks to KDE security team

This update can be downloaded from:

1023f08e9573cd579ed4d978b8f7a7fb  SRPMS/kdelibs-3.3.1-2.12.FC3.src.rpm
be28a562a1d99f4530ac1866ab332199  x86_64/kdelibs-3.3.1-2.12.FC3.x86_64.rpm
0e6fdd04807160ee7571bcfb098d4c79  x86_64/kdelibs-3.3.1-2.12.FC3.i386.rpm
0e6fdd04807160ee7571bcfb098d4c79  i386/kdelibs-3.3.1-2.12.FC3.i386.rpm
f14c330fcc3f2c9618dc88550d4dd307  i386/kdelibs-devel-3.3.1-2.12.FC3.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.

fedora-announce-list mailing list
fedora-announce-list at redhat.com

More information about the UCI-Linux mailing list