[SECURITY] Fedora 11 Update: kdebase-runtime-4.3.1-1.fc11

updates at fedoraproject.org updates at fedoraproject.org
Tue Sep 15 07:39:23 UTC 2009


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-9397
2009-09-09 00:46:12
--------------------------------------------------------------------------------

Name        : kdebase-runtime
Product     : Fedora 11
Version     : 4.3.1
Release     : 1.fc11
URL         : http://www.kde.org/
Summary     : K Desktop Environment - Runtime
Description :
Core runtime for the K Desktop Environment 4.

--------------------------------------------------------------------------------
Update Information:

This updates KDE to 4.3.1, the latest upstream bugfix release. The main
improvements are:  * KDE 4.3 is now also available in Croatian.  * A crash when
editing toolbar setup has been fixed.  * Support for transferring files through
SSH using KIO::Fish has been fixed.  * A number of bugs in KWin, KDE's window
and compositing manager has been fixed.  * A large number of bugs in KMail,
KDE's email client are now gone.    See
http://kde.org/announcements/announce-4.3.1.php for more information.    In
addition, this update:  * fixes a potential security issue (CVE-2009-2702) with
certificate validation in the KIO KSSL code. It is believed that the affected
code is not actually used (the code in Qt, for which a security update was
already issued, is) and thus the issue is only potential, but KSSL is being
patched just in case,  * splits PolicyKit-kde out of kdebase-workspace again to
avoid forcing it onto GNOME-based setups, where PolicyKit-gnome is desired
instead (#519654).
--------------------------------------------------------------------------------
ChangeLog:

* Fri Aug 28 2009 Than Ngo <than at redhat.com> - 4.3.0-1
- 4.3.1
* Wed Aug 12 2009 Lukáš Tinkl <ltinkl at redhat.com> - 4.3.0-4
- unbreak fish kioslave protocol (#516416)
* Mon Aug 10 2009 Lukáš Tinkl <ltinkl at redhat.com> - 4.3.0-3
- fix Oxygen comboboxes' text being garbled (drawn twice); fixes kdebug:202701
- fix Locale control module crashing when dragging languages around (kdebug:201578)
* Tue Aug  4 2009 Than Ngo <than at redhat.com> - 4.3.0-2
- respin
* Thu Jul 30 2009 Than Ngo <than at redhat.com> - 4.3.0-1
- 4.3.0
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 4.2.98-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Wed Jul 22 2009 Than Ngo <than at redhat.com> - 4.2.98-1
- 4.3rc3
* Thu Jul 16 2009 Rex Dieter <rdieter at fedoraproject.org> - 4.2.96-2
- respin (soprano-2.3.0) 
- License: LGPLv2+
* Thu Jul  9 2009 Than Ngo <than at redhat.com> - 4.2.96-1
- 4.3rc2
* Thu Jul  2 2009 Rex Dieter <rdieter at fedoraproject.org> 4.2.95-3
- drop unneeded BR: ImageMagick (#509241)
* Mon Jun 29 2009 Lukáš Tinkl <ltinkl at redhat.com> - 4.2.95-2
- don't start nepomuk server unconditionally (#487322)
* Thu Jun 25 2009 Than Ngo <than at redhat.com> - 4.2.95-1
- 4.3rc1
* Wed Jun  3 2009 Rex Dieter <rdieter at fedoraproject.org> - 4.2.90-1
- KDE-4.3 beta2 (4.2.90)
* Tue Jun  2 2009 Lorenzo Villani <lvillani at binaryhelix.net> - 4.2.85-3
- Drop old Fedora < 8 conditionals
* Tue May 19 2009 Than Ngo <than at redhat.com> - 4.2.85-2
- file conflicts with kdepim
* Wed May 13 2009 Lukáš Tinkl <ltinkl at redhat.com> - 4.2.85-1
- KDE 4.3 beta 1
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #520661 - CVE-2009-2702 kdelibs: kssl incorrect verification of SSL certificate with NUL in subjectAltName
        https://bugzilla.redhat.com/show_bug.cgi?id=520661
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update kdebase-runtime' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------




More information about the package-announce mailing list