bugtraq - [ MDVSA-2009:017 ] kdebase

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-Id: <E1LNvrE-0004e6-GD@titan.mandriva.com>
Date: Fri, 16 Jan 2009 14:04:00 -0700
From: security@...driva.com
To: bugtraq@...urityfocus.com
Subject: [ MDVSA-2009:017 ] kdebase


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

 Mandriva Linux Security Advisory                         MDVSA-2009:017
 http://www.mandriva.com/security/
 _______________________________________________________________________

 Package : kdebase
 Date    : January 16, 2009
 Affected: Corporate 3.0, Corporate 4.0
 _______________________________________________________________________

 Problem Description:

 A vulnerability in KDM allowed a local user to cause a denial of
 service via unknown vectors (CVE-2007-5963).
 
 The updated packages have been patched to prevent this issue.
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5963
 _______________________________________________________________________

 Updated Packages:

 Corporate 3.0:
 ab99eb502abbc52879d8ef3a29fc2c2c  corporate/3.0/i586/kdebase-3.2-79.20.C30mdk.i586.rpm
 e5261cbbd3ae48869816dc0754b942e1  corporate/3.0/i586/kdebase-common-3.2-79.20.C30mdk.i586.rpm
 226731e0f364a3594c023a1d3ffc112b  corporate/3.0/i586/kdebase-kate-3.2-79.20.C30mdk.i586.rpm
 b6c90c5027ddfbb26d161fc7495a1977  corporate/3.0/i586/kdebase-kcontrol-data-3.2-79.20.C30mdk.i586.rpm
 eb615778ced0cdf0c0b1c59f1c8147ea  corporate/3.0/i586/kdebase-kdeprintfax-3.2-79.20.C30mdk.i586.rpm
 c333c7b3dfd92b989c58cebe5858c45d  corporate/3.0/i586/kdebase-kdm-3.2-79.20.C30mdk.i586.rpm
 bef97096b53f5ed67837c7f921dde538  corporate/3.0/i586/kdebase-kdm-config-file-3.2-79.20.C30mdk.i586.rpm
 f3e0e10568955e5ed7a6b3747fb02663  corporate/3.0/i586/kdebase-kmenuedit-3.2-79.20.C30mdk.i586.rpm
 45e96ecb1a401de7bb9a431b3c9fdce3  corporate/3.0/i586/kdebase-konsole-3.2-79.20.C30mdk.i586.rpm
 cf477169f35d1fe802e52996e57181d5  corporate/3.0/i586/kdebase-nsplugins-3.2-79.20.C30mdk.i586.rpm
 df9de1124e1ede647f5610a700036925  corporate/3.0/i586/kdebase-progs-3.2-79.20.C30mdk.i586.rpm
 8bff9da05ba0ca7b7c8237564ca9dd61  corporate/3.0/i586/libkdebase4-3.2-79.20.C30mdk.i586.rpm
 60ec0e766e9b9878ef43c47da4bbf43c  corporate/3.0/i586/libkdebase4-devel-3.2-79.20.C30mdk.i586.rpm
 2054383b74ed0af18ab55266a5b7494b  corporate/3.0/i586/libkdebase4-kate-3.2-79.20.C30mdk.i586.rpm
 388f9df0d275d4299dec47b4a89a2f0c  corporate/3.0/i586/libkdebase4-kate-devel-3.2-79.20.C30mdk.i586.rpm
 aca1b1ca51eef874eeb70d5d2e557c8f  corporate/3.0/i586/libkdebase4-kmenuedit-3.2-79.20.C30mdk.i586.rpm
 6e2536ecdef66433af02cf097220b3b4  corporate/3.0/i586/libkdebase4-konsole-3.2-79.20.C30mdk.i586.rpm
 5e7368fd6ee263bec3a69d2390ad0dc2  corporate/3.0/i586/libkdebase4-nsplugins-3.2-79.20.C30mdk.i586.rpm
 b88b791d05ef0be4324027749554e1dd  corporate/3.0/i586/libkdebase4-nsplugins-devel-3.2-79.20.C30mdk.i586.rpm 
 a4d8471d078c7d90a44c03f7e5b00965  corporate/3.0/SRPMS/kdebase-3.2-79.20.C30mdk.src.rpm

 Corporate 3.0/X86_64:
 dfb3eddcd711be1c878345e9b79c4795  corporate/3.0/x86_64/kdebase-3.2-79.20.C30mdk.x86_64.rpm
 7783a005598711db823c85282707b10f  corporate/3.0/x86_64/kdebase-common-3.2-79.20.C30mdk.x86_64.rpm
 7300f511e2448c50098bd7112a6e9427  corporate/3.0/x86_64/kdebase-kate-3.2-79.20.C30mdk.x86_64.rpm
 08ce3d6a5078362903cf8d51c0d7d892  corporate/3.0/x86_64/kdebase-kcontrol-data-3.2-79.20.C30mdk.x86_64.rpm
 d1b490fe1393458f8e4c94e04ec485be  corporate/3.0/x86_64/kdebase-kdeprintfax-3.2-79.20.C30mdk.x86_64.rpm
 acc016e77ac4381bc3c9ae3f0e98995f  corporate/3.0/x86_64/kdebase-kdm-3.2-79.20.C30mdk.x86_64.rpm
 5b0aeb6da8d713adb4e57851eca65a62  corporate/3.0/x86_64/kdebase-kdm-config-file-3.2-79.20.C30mdk.x86_64.rpm
 47346574389c644c67683a49f1c256b0  corporate/3.0/x86_64/kdebase-kmenuedit-3.2-79.20.C30mdk.x86_64.rpm
 ee4b6fbaf275155872e7faca6d25373b  corporate/3.0/x86_64/kdebase-konsole-3.2-79.20.C30mdk.x86_64.rpm
 60d63dbb6d47c83625ec1fadb234c6ac  corporate/3.0/x86_64/kdebase-nsplugins-3.2-79.20.C30mdk.x86_64.rpm
 afeb1253ced03318f65c189790ed7a57  corporate/3.0/x86_64/kdebase-progs-3.2-79.20.C30mdk.x86_64.rpm
 d9cf8084f48fa89e36a08b4de7d66929  corporate/3.0/x86_64/lib64kdebase4-3.2-79.20.C30mdk.x86_64.rpm
 ec54fae40ba91c61754205066871d9ce  corporate/3.0/x86_64/lib64kdebase4-devel-3.2-79.20.C30mdk.x86_64.rpm
 f5bd2861e56a6d18890664289f598092  corporate/3.0/x86_64/lib64kdebase4-kate-3.2-79.20.C30mdk.x86_64.rpm
 5abc5cec669dafef3665f2799e092ba4  corporate/3.0/x86_64/lib64kdebase4-kate-devel-3.2-79.20.C30mdk.x86_64.rpm
 478fdf80bbb596c781391df9a5eeb8d4  corporate/3.0/x86_64/lib64kdebase4-kmenuedit-3.2-79.20.C30mdk.x86_64.rpm
 5495e0f5c381aeb1ec08376440d28baa  corporate/3.0/x86_64/lib64kdebase4-konsole-3.2-79.20.C30mdk.x86_64.rpm
 b43a919380cd1b0757609381c9f523b1  corporate/3.0/x86_64/lib64kdebase4-nsplugins-3.2-79.20.C30mdk.x86_64.rpm
 147b372b2d75d5199a8289c88ecac0c3  corporate/3.0/x86_64/lib64kdebase4-nsplugins-devel-3.2-79.20.C30mdk.x86_64.rpm 
 a4d8471d078c7d90a44c03f7e5b00965  corporate/3.0/SRPMS/kdebase-3.2-79.20.C30mdk.src.rpm

 Corporate 4.0:
 9771165968962a2fcddce0c362e10f24  corporate/4.0/i586/kdebase-3.5.4-2.5.20060mlcs4.i586.rpm
 741f0791f13f86a321f1f93df45161a8  corporate/4.0/i586/kdebase-common-3.5.4-2.5.20060mlcs4.i586.rpm
 d6079b78c14f3ec205b671d5b9baac6f  corporate/4.0/i586/kdebase-common-doc-3.5.4-2.5.20060mlcs4.i586.rpm
 6a95bbcdf66d4191d430afd70873383a  corporate/4.0/i586/kdebase-kate-3.5.4-2.5.20060mlcs4.i586.rpm
 a0f42bde38c1b8d82a59f3f01c1d7dbe  corporate/4.0/i586/kdebase-kcontrol-data-3.5.4-2.5.20060mlcs4.i586.rpm
 ec4a9a161f7717959d1f5ce79762c28a  corporate/4.0/i586/kdebase-kcontrol-doc-3.5.4-2.5.20060mlcs4.i586.rpm
 eef90d5e52f086be0059ede68183b195  corporate/4.0/i586/kdebase-kdeprintfax-3.5.4-2.5.20060mlcs4.i586.rpm
 e7959edb8793f2145d35287c942d81a5  corporate/4.0/i586/kdebase-kdm-3.5.4-2.5.20060mlcs4.i586.rpm
 f7668d070b687aa34b9a2f4fc8d4f645  corporate/4.0/i586/kdebase-kmenuedit-3.5.4-2.5.20060mlcs4.i586.rpm
 74b4c734cab3b155175b5e93c1235914  corporate/4.0/i586/kdebase-konsole-3.5.4-2.5.20060mlcs4.i586.rpm
 e721b9dd7aa5b794ff753fb47c3f62bc  corporate/4.0/i586/kdebase-nsplugins-3.5.4-2.5.20060mlcs4.i586.rpm
 e85994beeed62f7a46f0a0228e404556  corporate/4.0/i586/kdebase-progs-3.5.4-2.5.20060mlcs4.i586.rpm
 2d3deb45ec41ec7854c17655c7c87292  corporate/4.0/i586/libkateinterfaces0-3.5.4-2.5.20060mlcs4.i586.rpm
 084a9fbc82da0e3df01805d2da5543b1  corporate/4.0/i586/libkateutils0-3.5.4-2.5.20060mlcs4.i586.rpm
 d9e618055e1e5b833a414517e1aaef4d  corporate/4.0/i586/libkdebase4-3.5.4-2.5.20060mlcs4.i586.rpm
 eca0d75eec317888e32c111f696fcc1a  corporate/4.0/i586/libkdebase4-devel-3.5.4-2.5.20060mlcs4.i586.rpm
 fc695a320d69f74a522af12505725333  corporate/4.0/i586/libkdebase4-devel-doc-3.5.4-2.5.20060mlcs4.i586.rpm
 773f543717998e803e3a0f64eab1ffbd  corporate/4.0/i586/libkdebase4-kate-3.5.4-2.5.20060mlcs4.i586.rpm 
 faf5706f1d277f303d62a082542ac698  corporate/4.0/SRPMS/kdebase-3.5.4-2.5.20060mlcs4.src.rpm

 Corporate 4.0/X86_64:
 910238c070ecb81c53dfe4428ef6eaab  corporate/4.0/x86_64/kdebase-3.5.4-2.5.20060mlcs4.x86_64.rpm
 3526ad4c60b55ef4fe5eaa295cac484c  corporate/4.0/x86_64/kdebase-common-3.5.4-2.5.20060mlcs4.x86_64.rpm
 592a7ca45d2ebf4a1d18c791d04d69b2  corporate/4.0/x86_64/kdebase-common-doc-3.5.4-2.5.20060mlcs4.x86_64.rpm
 f0774f77708690ce8b373f4f873a74ed  corporate/4.0/x86_64/kdebase-kate-3.5.4-2.5.20060mlcs4.x86_64.rpm
 199f7fc1ffd41836517d68e816cb4568  corporate/4.0/x86_64/kdebase-kcontrol-data-3.5.4-2.5.20060mlcs4.x86_64.rpm
 6a4d0ce2592aebce38dfa2d130beac35  corporate/4.0/x86_64/kdebase-kcontrol-doc-3.5.4-2.5.20060mlcs4.x86_64.rpm
 2a6fb38219917812dfcadb370f3dfc05  corporate/4.0/x86_64/kdebase-kdeprintfax-3.5.4-2.5.20060mlcs4.x86_64.rpm
 02a35667534c7a239b48a5deab4163f0  corporate/4.0/x86_64/kdebase-kdm-3.5.4-2.5.20060mlcs4.x86_64.rpm
 7c0afbb2b6d25e19ba42c349f8f2ffe7  corporate/4.0/x86_64/kdebase-kmenuedit-3.5.4-2.5.20060mlcs4.x86_64.rpm
 1d144f5cf56c7e2304d64004519e2728  corporate/4.0/x86_64/kdebase-konsole-3.5.4-2.5.20060mlcs4.x86_64.rpm
 7058917aa186f940c19eaade8feb749f  corporate/4.0/x86_64/kdebase-nsplugins-3.5.4-2.5.20060mlcs4.x86_64.rpm
 bcd635f9293d494e6559f9e10a38087e  corporate/4.0/x86_64/kdebase-progs-3.5.4-2.5.20060mlcs4.x86_64.rpm
 ac27eb526f71f6d0823b8f8a159246d6  corporate/4.0/x86_64/lib64kateinterfaces0-3.5.4-2.5.20060mlcs4.x86_64.rpm
 b249167747a2179abf0f7de497b0e539  corporate/4.0/x86_64/lib64kateutils0-3.5.4-2.5.20060mlcs4.x86_64.rpm
 b8c826706ef9de0caf7961dc7c141caf  corporate/4.0/x86_64/lib64kdebase4-3.5.4-2.5.20060mlcs4.x86_64.rpm
 c6cb0a970d69490983dde172c630586a  corporate/4.0/x86_64/lib64kdebase4-devel-3.5.4-2.5.20060mlcs4.x86_64.rpm
 fd306fa2f11b32fc7b2aadb4e83e2f8b  corporate/4.0/x86_64/lib64kdebase4-devel-doc-3.5.4-2.5.20060mlcs4.x86_64.rpm
 5c974143a262905e1a94afc5d648bd28  corporate/4.0/x86_64/lib64kdebase4-kate-3.5.4-2.5.20060mlcs4.x86_64.rpm 
 faf5706f1d277f303d62a082542ac698  corporate/4.0/SRPMS/kdebase-3.5.4-2.5.20060mlcs4.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFJcMrVmqjQ0CJFipgRAgraAJ9BsPdfFsfGHKIGKEDD0KdIi9E7ngCfUoGA
IMpSS7+/Uo5++Drm7wvtyd8=
=4XXX
-----END PGP SIGNATURE-----