Format: 1.8 Date: Mon, 07 Dec 2009 17:42:13 +0000 Source: kdelibs Binary: kdelibs kdelibs-data kdelibs4c2a kdelibs4-dev kdelibs-dbg Architecture: ia64 ia64_translations Version: 4:3.5.10.dfsg.1-2.1ubuntu3 Distribution: lucid Urgency: low Maintainer: Ubuntu/ia64 Build Daemon Changed-By: Jonathan Riddell Description: kdelibs - core libraries from the official KDE release kdelibs-data - core shared data for all KDE applications kdelibs-dbg - debugging symbols for kdelibs kdelibs4-dev - development files for the KDE core libraries kdelibs4c2a - core libraries and binaries for all KDE applications Changes: kdelibs (4:3.5.10.dfsg.1-2.1ubuntu3) lucid; urgency=low . * SECURITY UPDATE: uncontrolled XMLHTTPRequest vulnerability - Ark and KMail performs insufficient validation which leads to specially crafted archive files, using unknown MIME types, to be rendered using a KHTML instance, this can trigger uncontrolled XMLHTTPRequests to remote sites - Add debian/patches/security_05_XMLHttpRequest_vulnerability.diff, restricts xmlhttprequest to http protocols only - http://www.kde.org/info/security/advisory-20091027-1.txt - oCert: #2009-015 http://www.ocert.org/advisories/ocert-2009-015.html - CVE n/a Checksums-Sha1: cca7ba79c81161d74c7a32f136e96666fb5a2a99 14558002 kdelibs4c2a_3.5.10.dfsg.1-2.1ubuntu3_ia64.deb c0136027b3fd0c052854fdddcbb85f29c99c1881 179880 kdelibs_3.5.10.dfsg.1-2.1ubuntu3_ia64_translations.tar.gz 270b3303493c150312521dac5ef15b88315042b8 1404668 kdelibs4-dev_3.5.10.dfsg.1-2.1ubuntu3_ia64.deb 3b86608936b6b8f3359cdcada98fb1dbc977149f 27324566 kdelibs-dbg_3.5.10.dfsg.1-2.1ubuntu3_ia64.deb Checksums-Sha256: 90688053d46e523651d5d4944360a2ece7b8146c04dd2c665a213dac7600fa90 14558002 kdelibs4c2a_3.5.10.dfsg.1-2.1ubuntu3_ia64.deb 32b46d335cbe01c9fed44aac09daa17952ff50ef15d1a51cb0a33c62a3fe7713 179880 kdelibs_3.5.10.dfsg.1-2.1ubuntu3_ia64_translations.tar.gz 433412414122dc9cd4c688602f9b718f52f85eb4186a22e82fc34d1013cd26e2 1404668 kdelibs4-dev_3.5.10.dfsg.1-2.1ubuntu3_ia64.deb 26d5542415215672e7b925a65f83130a9b36bd0c0cb3a7af796fa051a651e67a 27324566 kdelibs-dbg_3.5.10.dfsg.1-2.1ubuntu3_ia64.deb Files: 0034db8f14809433c961834a205b094f 14558002 libs optional kdelibs4c2a_3.5.10.dfsg.1-2.1ubuntu3_ia64.deb 3015c9f6dce5c061ccee62b108bd7356 179880 raw-translations - kdelibs_3.5.10.dfsg.1-2.1ubuntu3_ia64_translations.tar.gz d472cd0b12aa95946eb6d42332b8ebf3 1404668 libdevel optional kdelibs4-dev_3.5.10.dfsg.1-2.1ubuntu3_ia64.deb 0febf84bdf65c31c545d74d9e978003b 27324566 libdevel extra kdelibs-dbg_3.5.10.dfsg.1-2.1ubuntu3_ia64.deb Original-Maintainer: Debian Qt/KDE Maintainers