Ubuntu
kde4libs package

kde4libs 4:4.2.2-0ubuntu5.4 source package in Ubuntu

Changelog

kde4libs (4:4.2.2-0ubuntu5.4) jaunty-security; urgency=low

  [ Jamie Strandboge ]
  * SECURITY UPDATE: fix buffer overflow when converting string to float
    - debian/patches/CVE-2009-0689.diff: adjust Kmax to handle large field
      numbers in kjs/dtoa.cpp
    - CVE-2009-0689

  [ Jonathan Riddell ]
  * SECURITY UPDATE: uncontrolled XMLHTTPRequest vulnerability
    - Ark and KMail performs insufficient validation which leads to
      specially crafted archive files, using unknown MIME types, to be
      rendered using a KHTML instance, this can trigger uncontrolled
      XMLHTTPRequests to remote sites
    - Add debian/patches/security_02_XMLHttpRequest_vulnerability.diff,
      restricts xmlhttprequest to http protocols only
    - http://www.kde.org/info/security/advisory-20091027-1.txt
    - oCert: #2009-015 http://www.ocert.org/advisories/ocert-2009-015.html
    - CVE-2009-XXXX
 -- Jamie Strandboge <email address hidden>   Mon, 07 Dec 2009 15:25:55 -0600

Upload details

Uploaded by:
Jamie Strandboge
Uploaded to:
Jaunty
Original maintainer:
Kubuntu Members
Architectures:
any
Section:
libs
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
kde4libs_4.2.2.orig.tar.gz 11.8 MiB 9ce499d86d186134ffae116c1c393348f4bccdbb7c15f643ee9d274e52174b8d
kde4libs_4.2.2-0ubuntu5.4.diff.gz 101.6 KiB 3b5ed170a8f2b428e0b53c407707c7b51faaced1aec28a5d6000d451b2fc1263
kde4libs_4.2.2-0ubuntu5.4.dsc 2.3 KiB dd05ea17df100414209daf6377ff791dff08d6857a36cef9f77a0852eb83249d

View changes file

Binary packages built by this source

kdelibs-bin: No summary available for kdelibs-bin in ubuntu jaunty.

No description available for kdelibs-bin in ubuntu jaunty.

kdelibs5: No summary available for kdelibs5 in ubuntu jaunty.

No description available for kdelibs5 in ubuntu jaunty.

kdelibs5-data: No summary available for kdelibs5-data in ubuntu jaunty.

No description available for kdelibs5-data in ubuntu jaunty.

kdelibs5-dbg: No summary available for kdelibs5-dbg in ubuntu jaunty.

No description available for kdelibs5-dbg in ubuntu jaunty.

kdelibs5-dev: No summary available for kdelibs5-dev in ubuntu jaunty.

No description available for kdelibs5-dev in ubuntu jaunty.

libplasma-dev: No summary available for libplasma-dev in ubuntu jaunty.

No description available for libplasma-dev in ubuntu jaunty.

libplasma3: No summary available for libplasma3 in ubuntu jaunty.

No description available for libplasma3 in ubuntu jaunty.