[SECURITY] Fedora 21 Update: kde-runtime-4.14.3-3.fc21

updates at fedoraproject.org updates at fedoraproject.org
Wed Jan 14 23:58:40 UTC 2015


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-0569
2015-01-12 23:07:32
--------------------------------------------------------------------------------

Name        : kde-runtime
Product     : Fedora 21
Version     : 4.14.3
Release     : 3.fc21
URL         : http://www.kde.org/
Summary     : KDE Runtime
Description :
Core runtime for KDE 4.

--------------------------------------------------------------------------------
Update Information:

Pull in upstream fixes for: CVE-2013-7252 kwallet: crypto misuse, and kio_sftp corruption
--------------------------------------------------------------------------------
ChangeLog:

* Sun Jan 11 2015 Rex Dieter <rdieter at fedoraproject.org> - 4.14.3-3
- CVE-2013-7252 kwallet: crypto misuse (#1048168,#1048169)
- kio_sftp.so corrupts files when reading (#1177947)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1048168 - CVE-2013-7252 kwallet: crypto misuse
        https://bugzilla.redhat.com/show_bug.cgi?id=1048168
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update kde-runtime' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list