Ubuntu
kdelibs package

kdelibs 4:3.5.10.dfsg.1-3ubuntu2.10.04.1 source package in Ubuntu

Changelog

kdelibs (4:3.5.10.dfsg.1-3ubuntu2.10.04.1) lucid-security; urgency=low

  * SECURITY UPDATE: uncontrolled XMLHTTPRequest vulnerability. (LP: #661416)
    - Ark and KMail performs insufficient validation which leads to
      specially crafted archive files, using unknown MIME types, to be
      rendered using a KHTML instance, this can trigger uncontrolled
      XMLHTTPRequests to remote sites.
    - Add debian/patches/security_05_XMLHttpRequest_vulnerability.diff,
      restricts xmlhttprequest to http protocols only.
      This patch has been accidentally dropped in 4:3.5.10.dfsg.1-3ubuntu1.
    - http://www.kde.org/info/security/advisory-20091027-1.txt
    - oCert: #2009-015 http://www.ocert.org/advisories/ocert-2009-015.html
    - CVE n/a
  * Fix FTBFS: disable parallel building.
 -- Felix Geyer <email address hidden>   Fri, 15 Oct 2010 21:19:11 +0200

Upload details

Uploaded by:
Felix Geyer
Sponsored by:
Steve Beattie
Uploaded to:
Lucid
Original maintainer:
Kubuntu Members
Architectures:
any
Section:
libs
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
kdelibs_3.5.10.dfsg.1.orig.tar.gz 17.8 MiB 09119022c615547284beaa262ccc06fc9328f1dc66ebd030ab97d66819eb9f0d
kdelibs_3.5.10.dfsg.1-3ubuntu2.10.04.1.diff.gz 772.1 KiB c4db988ee52d9669a4b6964d177f109b19737af2c6d5110d268e4b763297542f
kdelibs_3.5.10.dfsg.1-3ubuntu2.10.04.1.dsc 2.9 KiB 56536486b91b4e94e3242de017c0e162fcd497513a7fa96e2b4a562ebe573ae2

View changes file

Binary packages built by this source

kdelibs: No summary available for kdelibs in ubuntu lucid.

No description available for kdelibs in ubuntu lucid.

kdelibs-data: No summary available for kdelibs-data in ubuntu lucid.

No description available for kdelibs-data in ubuntu lucid.

kdelibs-dbg: No summary available for kdelibs-dbg in ubuntu lucid.

No description available for kdelibs-dbg in ubuntu lucid.

kdelibs4-dev: No summary available for kdelibs4-dev in ubuntu lucid.

No description available for kdelibs4-dev in ubuntu lucid.

kdelibs4c2a: No summary available for kdelibs4c2a in ubuntu lucid.

No description available for kdelibs4c2a in ubuntu lucid.