Accepted:
OK: kdebase_3.5.2.orig.tar.gz
OK: kdebase_3.5.2-0ubuntu27.1.diff.gz
OK: kdebase_3.5.2-0ubuntu27.1.dsc
-> Component: main Section: kde
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Tue, 21 Aug 2007 14:03:23 +0000
Source: kdebase
Binary: kdesktop kcontrol kpersonalizer kdm kdebase-doc-html klipper kappfinder
kdebase-doc kdebase kmenuedit kicker libkonq4 konqueror-nsplugins kdebase-bin
kdebase-dev ksplash kdeprint libkonq4-dev kwin kdepasswd ksmserver kfind
kdebase-kio-plugins kpager khelpcenter kate ksysguard konqueror ktip ksysguardd
kdebase-data konsole
Architecture: source
Version: 4:3.5.2-0ubuntu27.1
Distribution: dapper-security
Urgency: low
Maintainer: Debian Qt/KDE Maintainers <[EMAIL PROTECTED]>
Changed-By: Jonathan Riddell <[EMAIL PROTECTED]>
Description:
kappfinder - non-KDE application finder for KDE
kate - advanced text editor for KDE
kcontrol - control center for KDE
kdebase - base components from the official KDE release
kdebase-bin - core binaries for the KDE base module
kdebase-data - shared data files for the KDE base module
kdebase-dev - development files for the KDE base module
kdebase-doc - developer documentation for the KDE base module
kdebase-doc-html - KDE base documentation in HTML format
kdebase-kio-plugins - core I/O slaves for KDE
kdepasswd - password changer for KDE
kdeprint - print system for KDE
kdesktop - miscellaneous binaries and files for the KDE desktop
kdm - X display manager for KDE
kfind - file-find utility for KDE
khelpcenter - help center for KDE
kicker - desktop panel for KDE
klipper - clipboard utility for KDE
kmenuedit - menu editor for KDE
konqueror - KDE's advanced file manager, web browser and document viewer
konqueror-nsplugins - Netscape plugin support for Konqueror
konsole - X terminal emulator for KDE
kpager - desktop pager for KDE
kpersonalizer - installation personalizer for KDE
ksmserver - session manager for KDE
ksplash - the KDE splash screen
ksysguard - system guard for KDE
ksysguardd - system guard daemon for KDE
ktip - useful tips for KDE
kwin - the KDE window manager
libkonq4 - core libraries for Konqueror
libkonq4-dev - development files for Konqueror's core libraries
Changes:
kdebase (4:3.5.2-0ubuntu27.1) dapper-security; urgency=low
.
* SECURITY UPDATE: konqueror address bar spoofing
* The Konqueror address bar is vulnerable to spoofing attacks
that are based on embedding white spaces in the url. In addition
the address bar could be tricked to show an URL which it is
intending to visit for a short amount of time instead of the
current URL.
* Add kubuntu_sec_01_konqeror_timer.diff from
http://websvn.kde.org/?view=rev&revision=568040
to allow security patch to apply.
* Add kubuntu_sec_02_address_spoofing.diff for konq_combo.cc,
konq_mainwindow.cc, konq_viewmgr.c
fixes address bar spoofing
* References
http://www.kde.org/info/security/advisory-20070816-1.txt
CVE-2007-4224
CVE-2007-4225
CVE-2007-3820
Files:
74f53fe75fd1fd3f61cb5e886dc5896b 1715 kde optional
kdebase_3.5.2-0ubuntu27.1.dsc
454d8cb4ac306680549610ec14494d81 1547921 kde optional
kdebase_3.5.2-0ubuntu27.1.diff.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFGy4XBH/9LqRcGPm0RAiEKAJ9aQKxxrwXPWnbQRddExN6CEn8ihACdHE0Q
EZ/gHRCjtk3tGn/uQKnZCh0=
=uEs0
-----END PGP SIGNATURE-----
--
dapper-changes mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/dapper-changes
