MDVA-2010:215 : libgpod

libgpod as shipped with Mandriva 2010.1 does not have support for HAL, the Hardware Abstraction Layer anymore. This is still needed for iPod support in KDE, so the update reenables HAL support. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not current...

[SECURITY] Fedora 14 Update: rekonq-0.6.1-1.fc14

rekonq is a KDE browser based on QtWebkit. Its code is based on Nokia QtDemoBrowser, just like Arora. It's implementation is going to embrace KDE technologies to have a full-featured KDE web browser...

SuSE 10 Security Update : kdelibs3 (ZYPP Patch Number 6692)

KDE KDELibs Remote Array Overrun Arbitrary code execution, CVE-2009-0689 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid49866; scriptversion"1.11";...

kdegraphics security update

CentOS Errata and Security Advisory CESA-2010:0753 Updated kdegraphics packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CV...

xpdf: uninitialized Gfx::parser pointer dereference

The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service crash via unknown vectors that trigger an uninitialized pointer...

Fedora Update for rekonq FEDORA-2010-12271

Check for the Version of rekonq OpenVAS Vulnerability Test Fedora Update for rekonq FEDORA-2010-12271 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for rekonq FEDORA-2010-12255

Check for the Version of rekonq OpenVAS Vulnerability Test Fedora Update for rekonq FEDORA-2010-12255 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

[SECURITY] Fedora 12 Update: rekonq-0.5.0-2.fc12

rekonq is a KDE browser based on QtWebkit. Its code is based on Nokia QtDemoBrowser, just like Arora. It's implementation is going to embrace KDE technologies to have a full-featured KDE web browser...

[SECURITY] Fedora 13 Update: rekonq-0.5.0-2.fc13

rekonq is a KDE browser based on QtWebkit. Its code is based on Nokia QtDemoBrowser, just like Arora. It's implementation is going to embrace KDE technologies to have a full-featured KDE web browser...

CVE-2010-2575

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via ...

CVE-2010-2575

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via ...

CVE-2010-2575

CVE-2010-2575 affects Okular (KDE SC 4.3.0–4.5.0). A heap-based overflow in the RLE decompression path (TranscribePalmImageToJPEG in generators/plucker/inplug/image.cpp) can be triggered by a crafted image inside a PDB/PDF, enabling either a crash or remote arbitrary code execution. Multiple conn...

Secunia Research: KDE Okular PDB Parsing RLE Decompression Buffer Overflow

====================================================================== Secunia Research 25/08/2010 - KDE Okular PDB Parsing RLE Decompression Buffer Overflow - ====================================================================== Table of Contents Affected...

KDE okular buffer overflow

Dynamic memory overflow on PDB files processing...

Rekonq 0.5 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20100818 Date: 18th August 2010 Author: Tim Brown URL: / Product: Rekonq 0.5 Vendor: Andrea Diamantini Risk: Medium Summary The Rekonq web browser is vulnerable to Javascript injection in a number of components of...

[SECURITY] [DSA 2078-1] New kvirc packages fix arbitrary IRC command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2078-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 31, 2010 http://www.debian.org/security/faq -...

CVE-2009-4975

Cross-site scripting XSS vulnerability in webview.cpp in QtDemoBrowser allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536...

DSA-2078-1 kvirc - arbitrary IRC command execution

Bulletin has no description...

MDVA-2009:257 : mandriva-kde4-config

In kde4-firstsetup.sh from Mandriva 2010.0 there was still some references to plasma which have been renamed to plasma-desktop on KDE 4.3. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabl...

MDVA-2010:010 : kde4-style-iaora

-In mandriva 2010.0 under KDE, the scrollbar was too small to be used in some cases, this update adds a minimum size to 21 for the scrollbar bug 56018. -In mandriva 2010.0 under KDE, Quassel could crash when highlighting links. -This update fixes the titlebar colors to make it friendly with ia or...