Ubuntu
kdelibs package

kdelibs 4:3.5.10.dfsg.1-2ubuntu7.2 source package in Ubuntu

Changelog

kdelibs (4:3.5.10.dfsg.1-2ubuntu7.2) karmic-security; urgency=low

  [ Jamie Strandboge ]
  * SECURITY UPDATE: fix buffer overflow when converting string to
    float
    - debian/patches/security_05_CVE-2009-0689.diff: adjust Kmax to handle
      large field numbers in kjs/dtoa.cpp
    - CVE-2009-0689

  [ Jonathan Riddell ]
  * SECURITY UPDATE: uncontrolled XMLHTTPRequest vulnerability
    - Ark and KMail performs insufficient validation which leads to
      specially crafted archive files, using unknown MIME types, to be
      rendered using a KHTML instance, this can trigger uncontrolled
      XMLHTTPRequests to remote sites
    - Add debian/patches/security_05_XMLHttpRequest_vulnerability.diff,
      restricts xmlhttprequest to http protocols only
    - http://www.kde.org/info/security/advisory-20091027-1.txt
    - oCert: #2009-015 http://www.ocert.org/advisories/ocert-2009-015.html
    - CVE-2009-XXXX
 -- Jamie Strandboge <email address hidden>   Mon, 07 Dec 2009 15:14:25 -0600

Upload details

Uploaded by:
Jamie Strandboge
Uploaded to:
Karmic
Original maintainer:
Kubuntu Members
Architectures:
any
Section:
libs
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
kdelibs_3.5.10.dfsg.1.orig.tar.gz 17.8 MiB 09119022c615547284beaa262ccc06fc9328f1dc66ebd030ab97d66819eb9f0d
kdelibs_3.5.10.dfsg.1-2ubuntu7.2.diff.gz 866.1 KiB d5619fc8c673e1776a04614c9b2a107919443dabbb37dccb180ac510844b3759
kdelibs_3.5.10.dfsg.1-2ubuntu7.2.dsc 2.3 KiB a0ba7974021ab29716cb36985ad4b4f5bc712c414a6696776df8962a9f017bc7

View changes file

Binary packages built by this source

kdelibs: No summary available for kdelibs in ubuntu karmic.

No description available for kdelibs in ubuntu karmic.

kdelibs-data: No summary available for kdelibs-data in ubuntu karmic.

No description available for kdelibs-data in ubuntu karmic.

kdelibs-dbg: No summary available for kdelibs-dbg in ubuntu karmic.

No description available for kdelibs-dbg in ubuntu karmic.

kdelibs4-dev: No summary available for kdelibs4-dev in ubuntu karmic.

No description available for kdelibs4-dev in ubuntu karmic.

kdelibs4c2a: No summary available for kdelibs4c2a in ubuntu karmic.

No description available for kdelibs4c2a in ubuntu karmic.