LinuxSecurity.com
Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Welcome!
Sign up!
EnGarde Community
Login
Polls
What is the most important Linux security technology?
 
Advisories
Community
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
SELinux
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Securitydistro
Latest Newsletters
Linux Security Week: February 9th, 2010
Linux Advisory Watch: February 5th, 2010
Subscribe
LinuxSecurity Newsletters
E-mail:
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

  
Fedora Core 3 Update: kdenetwork-3.3.1-3.2 Print E-mail
User Rating:      How can I rate this item?
Posted by Benjamin D. Thomas   
Fedora Multiple integer overflow flaws were found in the way Kopete processes Gadu-Gadu messages. A remote attacker could send a specially crafted Gadu-Gadu message which would cause Kopete to crash or possibly execute arbitrary code.
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-623
2005-07-22
---------------------------------------------------------------------

Product     : Fedora Core 3
Name        : kdenetwork
Version     : 3.3.1                      
Release     : 3.2                  
Summary     : K Desktop Environment - Network Applications
Description :
Networking applications for the K Desktop Environment.

---------------------------------------------------------------------
Update Information:

Multiple integer overflow flaws were found in the way Kopete processes
Gadu-Gadu messages. A remote attacker could send a specially crafted
Gadu-Gadu message which would cause Kopete to crash or possibly execute
arbitrary code. The Common Vulnerabilities and Exposures project
assigned the name CAN-2005-1852 to this issue.

Users of Kopete should update to these packages which contain a
patch to correct this issue. 
---------------------------------------------------------------------
* Thu Jul 21 2005 Than Ngo  7:3.3.1-3.2 
- fix crash in kopete
- apply patch to fix libgadu vulnerabilities #163811, CVE CAN-2005-1852
  thank to kde security team
- backport patch to fix annoying problem with registration
  dialog not able to register/retrieve token due to network problems.


---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

4a3c668ec29fb8e773fc7e4a04b16c80  SRPMS/kdenetwork-3.3.1-3.2.src.rpm
41070969d93975e7b1647aee7824138a  x86_64/kdenetwork-3.3.1-3.2.x86_64.rpm
021329dba0ce68dbc5f29317a6bf62e0  x86_64/kdenetwork-devel-3.3.1-3.2.x86_64.rpm
06e171725e200cde00ce1122a263c9db  x86_64/kdenetwork-nowlistening-3.3.1-3.2.x86_64.rpm
2241fd0dd7c68cf97b8f9939299ee621  x86_64/debug/kdenetwork-debuginfo-3.3.1-3.2.x86_64.rpm
4a2cb2ac7181f4ffa6394b87cf029603  i386/kdenetwork-3.3.1-3.2.i386.rpm
56eac72b061cdf77a0df1be6f562ffb1  i386/kdenetwork-devel-3.3.1-3.2.i386.rpm
da519edd88340600a98aea322f31dcf5  i386/kdenetwork-nowlistening-3.3.1-3.2.i386.rpm
eb1c027b4bb2bfeb40c8082e356f29e6  i386/debug/kdenetwork-debuginfo-3.3.1-3.2.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  
---------------------------------------------------------------------

--
fedora-announce-list mailing list
fedora-announce-list@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-announce-list
 
< Prev   Next >
    
Partner:

 

Latest Features
Hacks From Pax: Network Server Monitoring With Nmap
Review: Mod-Security 2.5 by Magnus Mischel
Review: Googling Security: How Much Does Google Know About You
A Secure Nagios Server
Never Installed a Firewall on Ubuntu? Try Firestarter
Review: Hacking Exposed Linux, Third Edition
Security Features of Firefox 3.0
Yesterday's Edition
Mozilla Removes Two Malicious Firefox Add-Ons
When is a 0day not a 0day? Fake OpenSSh exploit, again

QuickLinks: Comunity , HOWTOs , Blogs , Features , Book Reviews , Networking ,
  Security Projects ,   Latest News ,  Newsletters ,  SELinux ,  Privacy ,  Home,
 Hardening ,   About Us,   Advertise,   Legal Notice,   RSS,   Guardian Digital

(c)Copyright 2010 Guardian Digital, Inc. All rights reserved.