[SECURITY] Fedora Core 3 Update: kdenetwork-3.3.1-3.2

than at redhat.com than at redhat.com
Fri Jul 22 17:07:34 UTC 2005


---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-623
2005-07-22
---------------------------------------------------------------------

Product     : Fedora Core 3
Name        : kdenetwork
Version     : 3.3.1                      
Release     : 3.2                  
Summary     : K Desktop Environment - Network Applications
Description :
Networking applications for the K Desktop Environment.

---------------------------------------------------------------------
Update Information:

Multiple integer overflow flaws were found in the way Kopete processes
Gadu-Gadu messages. A remote attacker could send a specially crafted
Gadu-Gadu message which would cause Kopete to crash or possibly execute
arbitrary code. The Common Vulnerabilities and Exposures project
assigned the name CAN-2005-1852 to this issue.

Users of Kopete should update to these packages which contain a
patch to correct this issue. 
---------------------------------------------------------------------
* Thu Jul 21 2005 Than Ngo <than at redhat.com> 7:3.3.1-3.2 
- fix crash in kopete
- apply patch to fix libgadu vulnerabilities #163811, CVE CAN-2005-1852
  thank to kde security team
- backport patch to fix annoying problem with registration
  dialog not able to register/retrieve token due to network problems.


---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

4a3c668ec29fb8e773fc7e4a04b16c80  SRPMS/kdenetwork-3.3.1-3.2.src.rpm
41070969d93975e7b1647aee7824138a  x86_64/kdenetwork-3.3.1-3.2.x86_64.rpm
021329dba0ce68dbc5f29317a6bf62e0  x86_64/kdenetwork-devel-3.3.1-3.2.x86_64.rpm
06e171725e200cde00ce1122a263c9db  x86_64/kdenetwork-nowlistening-3.3.1-3.2.x86_64.rpm
2241fd0dd7c68cf97b8f9939299ee621  x86_64/debug/kdenetwork-debuginfo-3.3.1-3.2.x86_64.rpm
4a2cb2ac7181f4ffa6394b87cf029603  i386/kdenetwork-3.3.1-3.2.i386.rpm
56eac72b061cdf77a0df1be6f562ffb1  i386/kdenetwork-devel-3.3.1-3.2.i386.rpm
da519edd88340600a98aea322f31dcf5  i386/kdenetwork-nowlistening-3.3.1-3.2.i386.rpm
eb1c027b4bb2bfeb40c8082e356f29e6  i386/debug/kdenetwork-debuginfo-3.3.1-3.2.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  
---------------------------------------------------------------------




More information about the announce mailing list