---------------------------------------------------------------------Fedora Update Notification
FEDORA-2005-594
2005-07-19
---------------------------------------------------------------------Product     : Fedora Core 3
Name        : kdelibs
Version     : 3.3.1                      
Release     : 2.14.FC3                  
Summary     : K Desktop Environment - Libraries
Description :
Libraries for the K Desktop Environment. 

KDE Libraries include: kdecore (KDE core library), kdeui (user
interface), kfm (file manager), khtmlw (HTML widget), kio
(Input/Output, networking), kspell (spelling checker), jscript
(javascript), kab (addressbook), kimgio (image manipulation).

---------------------------------------------------------------------Update Information:

A flaw was discovered affecting Kate, the KDE advanced text editor, and
Kwrite. Depending on system settings it may be possible for a local user
to read the backup files created by Kate or Kwrite. The Common
Vulnerabilities and Exposures project assigned the name CAN-2005-1920 to
this issue.

Users of Kate or Kwrite should update to this erratum package which
contains a backported patch from the KDE security team correcting this issue. 
---------------------------------------------------------------------* Tue Jul 12 2005 Than Ngo  6:3.3.1-2.14.FC3
- Kate backup file permission leak, apply patch to fix this vulnerabilities
  CAN-2005-1920
- apply cvs patch to get rid of warning "Mutex destroy failure", #160922

* Wed May  4 2005 Than Ngo  6:3.3.1-2.13.FC3
- new patch to fix kimgio input validation vulnerabilities, CAN-2005-1046


---------------------------------------------------------------------This update can be downloaded from:
  
7c16ace15f5c3cc17833062448f9a479  SRPMS/kdelibs-3.3.1-2.14.FC3.src.rpm
ab43dbc1f7f8bd0ab15abbd1b81fa8b7  x86_64/kdelibs-3.3.1-2.14.FC3.x86_64.rpm
00ff507d1d9629744a0750c5dc36c0ca  x86_64/kdelibs-devel-3.3.1-2.14.FC3.x86_64.rpm
3aab6b8bf911cc5915392cafd78c5da3  x86_64/debug/kdelibs-debuginfo-3.3.1-2.14.FC3.x86_64.rpm
4ea59323607d5df364a9ba9a0bb9a6c7  x86_64/kdelibs-3.3.1-2.14.FC3.i386.rpm
4ea59323607d5df364a9ba9a0bb9a6c7  i386/kdelibs-3.3.1-2.14.FC3.i386.rpm
99f32b21eb7cf1c5a612356bcd935bcc  i386/kdelibs-devel-3.3.1-2.14.FC3.i386.rpm
a1baca56812419ec7f261291bb86084b  i386/debug/kdelibs-debuginfo-3.3.1-2.14.FC3.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  
-----------------------------------------------------------------------fedora-announce-list mailing list
fedora-announce-list@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-announce-list

Fedora Core 3 Update: kdelibs-3.3.1-2.14.FC3

July 19, 2005
A flaw was discovered affecting Kate, the KDE advanced text editor, and Kwrite

Summary

Libraries for the K Desktop Environment.

KDE Libraries include: kdecore (KDE core library), kdeui (user

interface), kfm (file manager), khtmlw (HTML widget), kio

(Input/Output, networking), kspell (spelling checker), jscript

(javascript), kab (addressbook), kimgio (image manipulation).

A flaw was discovered affecting Kate, the KDE advanced text editor, and

Kwrite. Depending on system settings it may be possible for a local user

to read the backup files created by Kate or Kwrite. The Common

Vulnerabilities and Exposures project assigned the name CAN-2005-1920 to

this issue.

Users of Kate or Kwrite should update to this erratum package which

contains a backported patch from the KDE security team correcting this issue.

- Kate backup file permission leak, apply patch to fix this vulnerabilities

CAN-2005-1920

- apply cvs patch to get rid of warning "Mutex destroy failure", #160922

* Wed May 4 2005 Than Ngo 6:3.3.1-2.13.FC3

- new patch to fix kimgio input validation vulnerabilities, CAN-2005-1046

7c16ace15f5c3cc17833062448f9a479 SRPMS/kdelibs-3.3.1-2.14.FC3.src.rpm

ab43dbc1f7f8bd0ab15abbd1b81fa8b7 x86_64/kdelibs-3.3.1-2.14.FC3.x86_64.rpm

00ff507d1d9629744a0750c5dc36c0ca x86_64/kdelibs-devel-3.3.1-2.14.FC3.x86_64.rpm

3aab6b8bf911cc5915392cafd78c5da3 x86_64/debug/kdelibs-debuginfo-3.3.1-2.14.FC3.x86_64.rpm

4ea59323607d5df364a9ba9a0bb9a6c7 x86_64/kdelibs-3.3.1-2.14.FC3.i386.rpm

4ea59323607d5df364a9ba9a0bb9a6c7 i386/kdelibs-3.3.1-2.14.FC3.i386.rpm

99f32b21eb7cf1c5a612356bcd935bcc i386/kdelibs-devel-3.3.1-2.14.FC3.i386.rpm

a1baca56812419ec7f261291bb86084b i386/debug/kdelibs-debuginfo-3.3.1-2.14.FC3.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com

http://www.redhat.com/mailman/listinfo/fedora-announce-list

FEDORA-2005-594 2005-07-19 Name : kdelibs Version : 3.3.1 Release : 2.14.FC3 Summary : K Desktop Environment - Libraries Description : Libraries for the K Desktop Environment. KDE Libraries include: kdecore (KDE core library), kdeui (user interface), kfm (file manager), khtmlw (HTML widget), kio (Input/Output, networking), kspell (spelling checker), jscript (javascript), kab (addressbook), kimgio (image manipulation). A flaw was discovered affecting Kate, the KDE advanced text editor, and Kwrite. Depending on system settings it may be possible for a local user to read the backup files created by Kate or Kwrite. The Common Vulnerabilities and Exposures project assigned the name CAN-2005-1920 to this issue. Users of Kate or Kwrite should update to this erratum package which contains a backported patch from the KDE security team correcting this issue. - Kate backup file permission leak, apply patch to fix this vulnerabilities CAN-2005-1920 - apply cvs patch to get rid of warning "Mutex destroy failure", #160922 * Wed May 4 2005 Than Ngo 6:3.3.1-2.13.FC3 - new patch to fix kimgio input validation vulnerabilities, CAN-2005-1046 7c16ace15f5c3cc17833062448f9a479 SRPMS/kdelibs-3.3.1-2.14.FC3.src.rpm ab43dbc1f7f8bd0ab15abbd1b81fa8b7 x86_64/kdelibs-3.3.1-2.14.FC3.x86_64.rpm 00ff507d1d9629744a0750c5dc36c0ca x86_64/kdelibs-devel-3.3.1-2.14.FC3.x86_64.rpm 3aab6b8bf911cc5915392cafd78c5da3 x86_64/debug/kdelibs-debuginfo-3.3.1-2.14.FC3.x86_64.rpm 4ea59323607d5df364a9ba9a0bb9a6c7 x86_64/kdelibs-3.3.1-2.14.FC3.i386.rpm 4ea59323607d5df364a9ba9a0bb9a6c7 i386/kdelibs-3.3.1-2.14.FC3.i386.rpm 99f32b21eb7cf1c5a612356bcd935bcc i386/kdelibs-devel-3.3.1-2.14.FC3.i386.rpm a1baca56812419ec7f261291bb86084b i386/debug/kdelibs-debuginfo-3.3.1-2.14.FC3.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. fedora-announce-list@redhat.com http://www.redhat.com/mailman/listinfo/fedora-announce-list

Change Log

References

Update Instructions

Severity
Name : kdelibs
Version : 3.3.1
Release : 2.14.FC3
Summary : K Desktop Environment - Libraries

Related News