Ubuntu
kde4libs package

kde4libs 4:4.3.2-0ubuntu7.2 source package in Ubuntu

Changelog

kde4libs (4:4.3.2-0ubuntu7.2) karmic-security; urgency=low

  [ Jamie Strandboge ]
  * SECURITY UPDATE: fix buffer overflow when converting string to float
    - debian/patches/security_02_CVE-2009-0689.diff: adjust Kmax to handle
      large field numbers in kjs/dtoa.cpp
    - CVE-2009-0689

  [ Jonathan Riddell ]
  * SECURITY UPDATE: uncontrolled XMLHTTPRequest vulnerability
    - Ark and KMail performs insufficient validation which leads to
      specially crafted archive files, using unknown MIME types, to be
      rendered using a KHTML instance, this can trigger uncontrolled
      XMLHTTPRequests to remote sites
    - Add debian/patches/security_02_XMLHttpRequest_vulnerability.diff,
      restricts xmlhttprequest to http protocols only
    - http://www.kde.org/info/security/advisory-20091027-1.txt
    - oCert: #2009-015 http://www.ocert.org/advisories/ocert-2009-015.html
    - CVE-2009-XXXX
 -- Jamie Strandboge <email address hidden>   Mon, 07 Dec 2009 15:27:41 -0600

Upload details

Uploaded by:
Jamie Strandboge
Uploaded to:
Karmic
Original maintainer:
Kubuntu Members
Architectures:
any
Section:
libs
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
kde4libs_4.3.2.orig.tar.gz 12.4 MiB 30288218c1105c732031b5a55789da5004d87a7b41104c062b131d41014cab49
kde4libs_4.3.2-0ubuntu7.2.diff.gz 157.1 KiB c21da9a7949b6a4b1d5e49511f27d5f9f99f0b91e52ed80c73856b673bcfb5b2
kde4libs_4.3.2-0ubuntu7.2.dsc 2.2 KiB 1c05cbc5a694a9e90e12d885ce61634301498d6c2b7fa62fb97b6b30eeb479f0

View changes file

Binary packages built by this source

kdelibs-bin: No summary available for kdelibs-bin in ubuntu karmic.

No description available for kdelibs-bin in ubuntu karmic.

kdelibs5: No summary available for kdelibs5 in ubuntu karmic.

No description available for kdelibs5 in ubuntu karmic.

kdelibs5-data: No summary available for kdelibs5-data in ubuntu karmic.

No description available for kdelibs5-data in ubuntu karmic.

kdelibs5-dbg: No summary available for kdelibs5-dbg in ubuntu karmic.

No description available for kdelibs5-dbg in ubuntu karmic.

kdelibs5-dev: No summary available for kdelibs5-dev in ubuntu karmic.

No description available for kdelibs5-dev in ubuntu karmic.

libplasma3: No summary available for libplasma3 in ubuntu karmic.

No description available for libplasma3 in ubuntu karmic.