USN-871-2: KDE 4 vulnerabilities | Ubuntu security notices

Packages

kde4libs -

Details

USN-871-1 fixed vulnerabilities in KDE. This update provides the
corresponding updates for KDE 4.

This update also fixes a directory traversal flaw in KDE when processing
help:// URLs. This issue only affected Ubuntu 8.10.

Original advisory details:

It was discovered that the KDE libraries could use KHTML to process an
unknown MIME type. If a user or application linked against kdelibs were
tricked into opening a crafted file, an attacker could potentially trigger
XMLHTTPRequests to remote sites.

USN-871-1 fixed vulnerabilities in KDE. This update provides the
corresponding updates for KDE 4.

This update also fixes a directory traversal flaw in KDE when processing
help:// URLs. This issue only affected Ubuntu 8.10.

Original advisory details:

It was discovered that the KDE libraries could use KHTML to process an
unknown MIME type. If a user or application linked against kdelibs were
tricked into opening a crafted file, an attacker could potentially trigger
XMLHTTPRequests to remote sites.

Update instructions

After a standard system upgrade you need to restart your session to effect the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
9.10 karmic	kdelibs5 – 4:4.3.2-0ubuntu7.2
9.04 jaunty	kdelibs5 – 4:4.2.2-0ubuntu5.4
8.10 intrepid	kdelibs5 – 4:4.1.4-0ubuntu1~intrepid1.5

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

https://launchpad.net/bugs/495301