Message-Id: <E1Oohwb-0004cY-Jg@titan.mandriva.com>
Date: Thu, 26 Aug 2010 21:17:01 +0200
From: security@...driva.com
To: full-disclosure@...ts.grok.org.uk
Subject: [ MDVSA-2010:162 ] kdegraphics4

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

 Mandriva Linux Security Advisory                         MDVSA-2010:162
 http://www.mandriva.com/security/
 _______________________________________________________________________

 Package : kdegraphics4
 Date    : August 26, 2010
 Affected: 2009.0, 2010.0, 2010.1
 _______________________________________________________________________

 Problem Description:

 A vulnerability has been found and corrected in okular (kdegraphics):
 
 A specially crafted PDF or PS file could cause okular to crash or
 execute arbitrary code (CVE-2010-2575).
 
 The updated packages have been patched to correct this issue.
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2575
 http://www.kde.org/info/security/advisory-20100825-1.txt
 _______________________________________________________________________

 Updated Packages:

 Mandriva Linux 2009.0:
 c648a14f7ce582f7980e3ef16f411f27  2009.0/i586/gwenview-4.2.4-0.4mdv2009.0.i586.rpm
 d040a7d7ae0c567806ce670c8e55a59f  2009.0/i586/kamera-4.2.4-0.4mdv2009.0.i586.rpm
 7c4043064f0abf6dff6c80155c7a0749  2009.0/i586/kcolorchooser-4.2.4-0.4mdv2009.0.i586.rpm
 4a7e069c223a4e80617e95a020df11f9  2009.0/i586/kdegraphics4-4.2.4-0.4mdv2009.0.i586.rpm
 cb3b80670ff24a0a177d41d272ccf326  2009.0/i586/kdegraphics4-core-4.2.4-0.4mdv2009.0.i586.rpm
 651aae237997ba2fc9620ec7362f2920  2009.0/i586/kdegraphics4-devel-4.2.4-0.4mdv2009.0.i586.rpm
 2048417ac996deabfb64cdf76fd4e6e9  2009.0/i586/kgamma-4.2.4-0.4mdv2009.0.i586.rpm
 ef2038b5d2d8ed619c34f3a523da4641  2009.0/i586/kipi-common-4.2.4-0.4mdv2009.0.i586.rpm
 30b4c2bfb86b71a1d78a77afb2821903  2009.0/i586/kolourpaint-4.2.4-0.4mdv2009.0.i586.rpm
 072968df006aa35844e56562abe33fc6  2009.0/i586/kruler-4.2.4-0.4mdv2009.0.i586.rpm
 8aec97986add1763011a6869445272e4  2009.0/i586/ksnapshot-4.2.4-0.4mdv2009.0.i586.rpm
 5ad421f32d31345f3034c08f15bd9dbe  2009.0/i586/libgwenviewlib4-4.2.4-0.4mdv2009.0.i586.rpm
 42ce157776be38e31378048f2a928985  2009.0/i586/libkdcraw7-4.2.4-0.4mdv2009.0.i586.rpm
 004d11a627cfd209b1d641d77a1a0c98  2009.0/i586/libkdcraw-common-4.2.4-0.4mdv2009.0.i586.rpm
 8f5aa2775aae349cc5f9cc5440dc654f  2009.0/i586/libkexiv2_7-4.2.4-0.4mdv2009.0.i586.rpm
 36c787a64d38477a9aaf1df781bcf3be  2009.0/i586/libkipi6-4.2.4-0.4mdv2009.0.i586.rpm
 1d5a0922a65e58e6e7ff2039b052bd8a  2009.0/i586/libkolourpaint_lgpl4-4.2.4-0.4mdv2009.0.i586.rpm
 dc7716740c15873ad7430b82ec9e7463  2009.0/i586/libksane0-4.2.4-0.4mdv2009.0.i586.rpm
 338e76940f6fb61f441d399d4618778f  2009.0/i586/libokularcore1-4.2.4-0.4mdv2009.0.i586.rpm
 3448a8dad6dc26223bde445467fe8ea2  2009.0/i586/okular-4.2.4-0.4mdv2009.0.i586.rpm 
 633239812c4ab511807f8353c5111df3  2009.0/SRPMS/kdegraphics4-4.2.4-0.4mdv2009.0.src.rpm

 Mandriva Linux 2009.0/X86_64:
 84b4b6fd46244817f039651e22553b89  2009.0/x86_64/gwenview-4.2.4-0.4mdv2009.0.x86_64.rpm
 620705ce2a61e6a5ec934570911bb0b3  2009.0/x86_64/kamera-4.2.4-0.4mdv2009.0.x86_64.rpm
 5f67f49500ce0a69a3030341a36e92f7  2009.0/x86_64/kcolorchooser-4.2.4-0.4mdv2009.0.x86_64.rpm
 b8d8af6b9d362da457058ab02b0cec3c  2009.0/x86_64/kdegraphics4-4.2.4-0.4mdv2009.0.x86_64.rpm
 195b4f8ed3dd4d559f6f2d70b01f6d86  2009.0/x86_64/kdegraphics4-core-4.2.4-0.4mdv2009.0.x86_64.rpm
 0a06a932f6a1351567a7d6dcc6422ade  2009.0/x86_64/kdegraphics4-devel-4.2.4-0.4mdv2009.0.x86_64.rpm
 8816dd6d57357b6a8b6cebd3a03fa5c6  2009.0/x86_64/kgamma-4.2.4-0.4mdv2009.0.x86_64.rpm
 9783906b67be3c784636873fabc1d009  2009.0/x86_64/kipi-common-4.2.4-0.4mdv2009.0.x86_64.rpm
 286aea56f780e2e365e045188770e3b4  2009.0/x86_64/kolourpaint-4.2.4-0.4mdv2009.0.x86_64.rpm
 1a304d861ced046565f44fc3d0b13ae7  2009.0/x86_64/kruler-4.2.4-0.4mdv2009.0.x86_64.rpm
 df06e4b4e575e085695b6e82e4bf4168  2009.0/x86_64/ksnapshot-4.2.4-0.4mdv2009.0.x86_64.rpm
 187837a5fb2eb7d06aa68ce4688ecab3  2009.0/x86_64/lib64gwenviewlib4-4.2.4-0.4mdv2009.0.x86_64.rpm
 ba05832666775446875dcbb913c6f162  2009.0/x86_64/lib64kdcraw7-4.2.4-0.4mdv2009.0.x86_64.rpm
 1d0870fcebb35f09f44a922c62baad48  2009.0/x86_64/lib64kexiv2_7-4.2.4-0.4mdv2009.0.x86_64.rpm
 f594c51859501bee4240df8d4567d11e  2009.0/x86_64/lib64kipi6-4.2.4-0.4mdv2009.0.x86_64.rpm
 2c49bdfedcf360c2b6c749160537aeeb  2009.0/x86_64/lib64kolourpaint_lgpl4-4.2.4-0.4mdv2009.0.x86_64.rpm
 9e8d78a4835d39bec589b4fb225857c2  2009.0/x86_64/lib64ksane0-4.2.4-0.4mdv2009.0.x86_64.rpm
 cebcd7f642c08007b3fe82769fb47e3c  2009.0/x86_64/lib64okularcore1-4.2.4-0.4mdv2009.0.x86_64.rpm
 6a3ce2414954956cb47115d34b09af4e  2009.0/x86_64/libkdcraw-common-4.2.4-0.4mdv2009.0.x86_64.rpm
 ec8f0796c915d83fb4dd45f77dbda0e7  2009.0/x86_64/okular-4.2.4-0.4mdv2009.0.x86_64.rpm 
 633239812c4ab511807f8353c5111df3  2009.0/SRPMS/kdegraphics4-4.2.4-0.4mdv2009.0.src.rpm

 Mandriva Linux 2010.0:
 0f16a0d8714c0857b16f8a5dfc01f10f  2010.0/i586/gwenview-4.3.5-0.7mdv2010.0.i586.rpm
 27f502a67ebbe127bcf572f3091fde6d  2010.0/i586/kamera-4.3.5-0.7mdv2010.0.i586.rpm
 60b40a8733ceecfdc017ac671d9f2603  2010.0/i586/kcolorchooser-4.3.5-0.7mdv2010.0.i586.rpm
 cacc63a9677566c2c3dc38cdb7bbbd7f  2010.0/i586/kdegraphics4-4.3.5-0.7mdv2010.0.i586.rpm
 77ab0bf94233cdf12d822a6cb5d80807  2010.0/i586/kdegraphics4-core-4.3.5-0.7mdv2010.0.i586.rpm
 000f27d742fa0fd171d0b013e62d0f11  2010.0/i586/kdegraphics4-devel-4.3.5-0.7mdv2010.0.i586.rpm
 f1e704897936b9efc293b06f41905ce4  2010.0/i586/kgamma-4.3.5-0.7mdv2010.0.i586.rpm
 c11b6c1c2c4a63aa5f5e9383d0863254  2010.0/i586/kipi-common-4.3.5-0.7mdv2010.0.i586.rpm
 9cf00fabe60141d08b59d5245939a41c  2010.0/i586/kolourpaint-4.3.5-0.7mdv2010.0.i586.rpm
 ee7d59556417fee0ba9a5407a2d19c65  2010.0/i586/kruler-4.3.5-0.7mdv2010.0.i586.rpm
 607120df5af7434778ea7441bc4ead77  2010.0/i586/ksnapshot-4.3.5-0.7mdv2010.0.i586.rpm
 a0123d0e7aee341c11ff01902610fdee  2010.0/i586/libgwenviewlib4-4.3.5-0.7mdv2010.0.i586.rpm
 d382a3572874d0b39cd8042affbf407e  2010.0/i586/libkdcraw8-4.3.5-0.7mdv2010.0.i586.rpm
 4ce39963c04ed274f6700864bd05356d  2010.0/i586/libkdcraw-common-4.3.5-0.7mdv2010.0.i586.rpm
 4b8df7dbf694b86bbd61c0067e0e4f09  2010.0/i586/libkexiv2_8-4.3.5-0.7mdv2010.0.i586.rpm
 5d5dcc9c60840e3dd637b8434349bd84  2010.0/i586/libkipi6-4.3.5-0.7mdv2010.0.i586.rpm
 7e7597a6b3bfe159379992195d37d4b9  2010.0/i586/libkolourpaint_lgpl4-4.3.5-0.7mdv2010.0.i586.rpm
 d7bd0382d9d94e988e0c1723b102a45b  2010.0/i586/libksane0-4.3.5-0.7mdv2010.0.i586.rpm
 3036295e0e8b8d51181c58ce55039559  2010.0/i586/libokularcore1-4.3.5-0.7mdv2010.0.i586.rpm
 dcab0ea18c6eb516f6b775f8448b45d4  2010.0/i586/okular-4.3.5-0.7mdv2010.0.i586.rpm 
 f77f295b8defc37ade3f7a709074c3ec  2010.0/SRPMS/kdegraphics4-4.3.5-0.7mdv2010.0.src.rpm

 Mandriva Linux 2010.0/X86_64:
 e197f3a2388d2ae85c93d5628745ce32  2010.0/x86_64/gwenview-4.3.5-0.7mdv2010.0.x86_64.rpm
 519f5c8394c871779268d354fe4f7552  2010.0/x86_64/kamera-4.3.5-0.7mdv2010.0.x86_64.rpm
 63a389028405c7337388051ddb46b39b  2010.0/x86_64/kcolorchooser-4.3.5-0.7mdv2010.0.x86_64.rpm
 76bd2210460cba6068cd8ba32dc14b59  2010.0/x86_64/kdegraphics4-4.3.5-0.7mdv2010.0.x86_64.rpm
 e4523fd4ee2b9c977477473aa081e4f5  2010.0/x86_64/kdegraphics4-core-4.3.5-0.7mdv2010.0.x86_64.rpm
 80116260c72accaf8708e19c64f1513f  2010.0/x86_64/kdegraphics4-devel-4.3.5-0.7mdv2010.0.x86_64.rpm
 f9c0ea2475eea8a6ef0bd5b77322c62c  2010.0/x86_64/kgamma-4.3.5-0.7mdv2010.0.x86_64.rpm
 deb5668f5ae1d7d1610e528650fe54c7  2010.0/x86_64/kipi-common-4.3.5-0.7mdv2010.0.x86_64.rpm
 4288136f70c4e6165ce08714bbc37518  2010.0/x86_64/kolourpaint-4.3.5-0.7mdv2010.0.x86_64.rpm
 7d13c5d76ea782e9899a05dc592352d9  2010.0/x86_64/kruler-4.3.5-0.7mdv2010.0.x86_64.rpm
 70af7d5e4c7c898e33fe7e313b34499c  2010.0/x86_64/ksnapshot-4.3.5-0.7mdv2010.0.x86_64.rpm
 ebfa0ef6fe44306daa586fc94ff0089c  2010.0/x86_64/lib64gwenviewlib4-4.3.5-0.7mdv2010.0.x86_64.rpm
 caf01800ae093cf3e4e42ff458be7933  2010.0/x86_64/lib64kdcraw8-4.3.5-0.7mdv2010.0.x86_64.rpm
 6c134fe487d1ef7a433b104b94a0fea1  2010.0/x86_64/lib64kexiv2_8-4.3.5-0.7mdv2010.0.x86_64.rpm
 df594af356312e4f7fd65a8e6ab95351  2010.0/x86_64/lib64kipi6-4.3.5-0.7mdv2010.0.x86_64.rpm
 da54a1a8365c553a3965f35bb4e899ca  2010.0/x86_64/lib64kolourpaint_lgpl4-4.3.5-0.7mdv2010.0.x86_64.rpm
 01bdbd4f3a416af6b00e3000378a7ef4  2010.0/x86_64/lib64ksane0-4.3.5-0.7mdv2010.0.x86_64.rpm
 eb55e18cca8d14c317f735d244cef407  2010.0/x86_64/lib64okularcore1-4.3.5-0.7mdv2010.0.x86_64.rpm
 da568a8939adcbc5d4bb4c4580cf0507  2010.0/x86_64/libkdcraw-common-4.3.5-0.7mdv2010.0.x86_64.rpm
 b8ea778bbcb02cd227083dc0c22ed32b  2010.0/x86_64/okular-4.3.5-0.7mdv2010.0.x86_64.rpm 
 f77f295b8defc37ade3f7a709074c3ec  2010.0/SRPMS/kdegraphics4-4.3.5-0.7mdv2010.0.src.rpm

 Mandriva Linux 2010.1:
 4f56f0d7127faae1d69c55e10f587307  2010.1/i586/gwenview-4.4.3-3.1mdv2010.1.i586.rpm
 9acab2740a3cb3134c906aff216e6eef  2010.1/i586/kamera-4.4.3-3.1mdv2010.1.i586.rpm
 7fb22e38a2fabebf1a58af61390b7c7a  2010.1/i586/kcolorchooser-4.4.3-3.1mdv2010.1.i586.rpm
 d7a41dd5862c3825f6462bb869cbb03a  2010.1/i586/kdegraphics4-4.4.3-3.1mdv2010.1.i586.rpm
 5158e8487a30a55e28df87e692fc370d  2010.1/i586/kdegraphics4-core-4.4.3-3.1mdv2010.1.i586.rpm
 302b9e77db12fc315da4fb27889dfd46  2010.1/i586/kdegraphics4-devel-4.4.3-3.1mdv2010.1.i586.rpm
 efd706087241f79238fb253e572840f7  2010.1/i586/kgamma-4.4.3-3.1mdv2010.1.i586.rpm
 d99418c3cb28ba71dbbd6a74350eeb02  2010.1/i586/kipi-common-4.4.3-3.1mdv2010.1.i586.rpm
 82742ec4c3325596f9f2ff43f1690ccb  2010.1/i586/kolourpaint-4.4.3-3.1mdv2010.1.i586.rpm
 e004f6355a076fa6920eded986af96c5  2010.1/i586/kruler-4.4.3-3.1mdv2010.1.i586.rpm
 422589f4dc7166d223dea4b8493f6c2d  2010.1/i586/ksnapshot-4.4.3-3.1mdv2010.1.i586.rpm
 01afdde884f810717bff69041dcf2c24  2010.1/i586/libgwenviewlib4-4.4.3-3.1mdv2010.1.i586.rpm
 4109683fb36f9c31f68148f9f7dcf0fd  2010.1/i586/libkdcraw8-4.4.3-3.1mdv2010.1.i586.rpm
 8967f090f1fe69daaafaf76f51ba09ef  2010.1/i586/libkdcraw-common-4.4.3-3.1mdv2010.1.i586.rpm
 b2a1a890766f236a5324e528fb329a56  2010.1/i586/libkexiv2_8-4.4.3-3.1mdv2010.1.i586.rpm
 82a3a22f1e4d3529800d3e1e0f7ec0f6  2010.1/i586/libkipi7-4.4.3-3.1mdv2010.1.i586.rpm
 68c4a2f16ebf15753d9149b0d15a9cb0  2010.1/i586/libkolourpaint_lgpl4-4.4.3-3.1mdv2010.1.i586.rpm
 2936daad88efa120c352a92976a97dac  2010.1/i586/libksane0-4.4.3-3.1mdv2010.1.i586.rpm
 73c3a4e48f9428cd2f82e76b0a53afc9  2010.1/i586/libokularcore1-4.4.3-3.1mdv2010.1.i586.rpm
 1567cd3f070ce05e02529d52a2f5f4b3  2010.1/i586/okular-4.4.3-3.1mdv2010.1.i586.rpm 
 3c796e42df70172c52f6ba2840b76a4b  2010.1/SRPMS/kdegraphics4-4.4.3-3.1mdv2010.1.src.rpm

 Mandriva Linux 2010.1/X86_64:
 4f1d594d0968205e74126cdcb22c852c  2010.1/x86_64/gwenview-4.4.3-3.1mdv2010.1.x86_64.rpm
 92643488afdcbca7af8049608f92866c  2010.1/x86_64/kamera-4.4.3-3.1mdv2010.1.x86_64.rpm
 38a8cdac083f2a269f40506721364ec0  2010.1/x86_64/kcolorchooser-4.4.3-3.1mdv2010.1.x86_64.rpm
 fc15b6cd047911aa375c95b031122523  2010.1/x86_64/kdegraphics4-4.4.3-3.1mdv2010.1.x86_64.rpm
 94c48e6fad186b805d644faaa19d30ab  2010.1/x86_64/kdegraphics4-core-4.4.3-3.1mdv2010.1.x86_64.rpm
 09c08cf1bd8f2be199bcbe02ae871936  2010.1/x86_64/kdegraphics4-devel-4.4.3-3.1mdv2010.1.x86_64.rpm
 628344f742cb89aa83a981a3990af829  2010.1/x86_64/kgamma-4.4.3-3.1mdv2010.1.x86_64.rpm
 fe4eba8f948db1b45c055d0dc9f3ab16  2010.1/x86_64/kipi-common-4.4.3-3.1mdv2010.1.x86_64.rpm
 0c44aba059784b5211ec3058fe1ba56c  2010.1/x86_64/kolourpaint-4.4.3-3.1mdv2010.1.x86_64.rpm
 a004a459b331928cdd0b34dec4c6c97d  2010.1/x86_64/kruler-4.4.3-3.1mdv2010.1.x86_64.rpm
 a06340fcc43f368474cb8ea7e4a128aa  2010.1/x86_64/ksnapshot-4.4.3-3.1mdv2010.1.x86_64.rpm
 a26fe83d79ec8f6f74169e34e61449f9  2010.1/x86_64/lib64gwenviewlib4-4.4.3-3.1mdv2010.1.x86_64.rpm
 e8e54773663bbfe42b60ce62b7acc197  2010.1/x86_64/lib64kdcraw8-4.4.3-3.1mdv2010.1.x86_64.rpm
 facb89228907e19f850a807ec1d7488a  2010.1/x86_64/lib64kexiv2_8-4.4.3-3.1mdv2010.1.x86_64.rpm
 b11f2cb998a5da28b2c4f10facef5869  2010.1/x86_64/lib64kipi7-4.4.3-3.1mdv2010.1.x86_64.rpm
 a88052d7175d6a6207cd4bd163b1ffe5  2010.1/x86_64/lib64kolourpaint_lgpl4-4.4.3-3.1mdv2010.1.x86_64.rpm
 95ea9d1366853a03590e0c12132ede94  2010.1/x86_64/lib64ksane0-4.4.3-3.1mdv2010.1.x86_64.rpm
 ac4306eaa84b3ab1c48ba55df79b6a59  2010.1/x86_64/lib64okularcore1-4.4.3-3.1mdv2010.1.x86_64.rpm
 69fb21e574db015fde4478405045f768  2010.1/x86_64/libkdcraw-common-4.4.3-3.1mdv2010.1.x86_64.rpm
 8fc68b147adf4e127ad490ec25954965  2010.1/x86_64/okular-4.4.3-3.1mdv2010.1.x86_64.rpm 
 3c796e42df70172c52f6ba2840b76a4b  2010.1/SRPMS/kdegraphics4-4.4.3-3.1mdv2010.1.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFMdo+ymqjQ0CJFipgRAn4eAJ48WoKkOxIgHLQPCFwwMepIj6vjGQCcCj3t
LbI3Qk4z35J/t0ZsiA8Dkwc=
=7+Ec
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists