Fedora 8 : kde-filesystem-4-14.fc8 / kdebase-runtime-4.0.3-10.fc8.1 / kdebase4-4.0.3-9.fc8 / etc (2008-3412)

The remote Fedora host is missing one or more security updates : kdepimlibs-4.0.3-3.fc8 : - Thu Apr 3 2008 Kevin Kofler 4.0.3-3 - rebuild again for the fixed %kde4buildtype - Mon Mar 31 2008 Kevin Kofler 4.0.3-2 - rebuild for NDEBUG and kde4libexecdir - Fri Mar 28 2008 Than Ngo 4.0.3-1 - 4.0.3 -...

GLSA-200804-30 : KDE start_kdeinit: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200804-30 KDE startkdeinit: Multiple vulnerabilities Vulnerabilities have been reported in the processing of user-controlled data by startkdeinit, which is setuid root by default. Impact : A local attacker could possibly execute...

Fedora 7 : kde-filesystem-4-14.fc7 / kdebase-runtime-4.0.3-10.fc7.1 / kdebase4-4.0.3-9.fc7 / etc (2008-3379)

Bug 443766 - CVE-2008-1670 kdelibs: Buffer overflow in KHTML's image loader Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

[SECURITY] Fedora 8 Update: kde-filesystem-4-14.fc8

This package provides some directories that are required/used by KDE...

[SECURITY] Fedora 7 Update: kdebase4-4.0.3-9.fc7

Core runtime requirements and applications for the K Desktop Environment 4. This package does not include the KDE 4 versions of applications which are provided by KDE 3 because of file and configuration setting conflicts...

[SECURITY] Fedora 7 Update: kde-filesystem-4-14.fc7

This package provides some directories that are required/used by KDE...

KDE KHTML PNGLoader堆溢出漏洞

BUGTRAQ ID: 28937 CVECAN ID: CVE-2008-1670 KDE是一个为UNIX工作站设计的强大的开源图形桌面环境。 KDE的KHTML中的PNG图形加载器存在堆溢出漏洞，如果用户访问了恶意网页并加载了特制的编码图形的话，就可能触发这个溢出，导致执行任意指令。 KDE 4.0 KDE --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： ftp://ftp.kde.org/pub/kde/securitypatches...

[Full-disclosure] [ GLSA 200804-30 ] KDE start_kdeinit: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200804-30 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

KDE start_kdeinit本地权限提升漏洞

BUGTRAQ ID: 28938 CVECAN ID: CVE-2008-1671 KDE是一个为UNIX工作站设计的强大的开源图形桌面环境。 startkdeinit是KDE使用的用于启动kdeinit的封装程序，默认下startkdeinit是以setuid root安装的，这允许本地用户向其他进程发送Unix信号，导致拒绝服务或执行任意指令。 KDE 3.5.5 - 3.5.9 KDE --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

KDE start_kdeinit: Multiple vulnerabilities

Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like operating systems. startkdeinit is a wrapper for kdeinit. Description Vulnerabilities have been reported in the processing of user-controlled data by startkdeinit, which is setuid root by default. Impact A loca...

KDE start_kdeinit privilege escalation

It's possible to execute code with root privileges or send signals to privileged processes...

CVE-2008-1670

Heap-based buffer overflow in the progressive PNG Image loader decoders/pngloader.cpp in KHTML in KDE 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted image...

CVE-2008-1671

startkdeinit in KDE 3.5.5 through 3.5.9, when installed setuid root, allows local users to cause a denial of service and possibly execute arbitrary code via "user-influenceable input" probably command-line arguments that cause startkdeinit to send SIGUSR1 signals to other processes...

CVE-2008-1671

startkdeinit in KDE 3.5.5 through 3.5.9, when installed setuid root, allows local users to cause a denial of service and possibly execute arbitrary code via "user-influenceable input" probably command-line arguments that cause startkdeinit to send SIGUSR1 signals to other processes...

CVE-2008-1670

Heap-based buffer overflow in the progressive PNG Image loader decoders/pngloader.cpp in KHTML in KDE 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted image...

CVE-2008-1670

The CVE-2008-1670 entry describes a heap-based buffer overflow in KDE’s KHTML PNG image loader (decoders/pngloader.cpp) affecting KDE 4.0.x up to 4.0.3. An attacker could trigger a denial of service (crash) and potentially execute arbitrary code via a crafted PNG image. The description does not s...

CVE-2008-1671

CVE-2008-1671 affects KDE’s start_kdeinit in KDE 3.5.5–3.5.9 when installed setuid root. A local user can trigger denial of service and, per advisories, potentially execute arbitrary code by supplying input that causes start_kdeinit to send SIGUSR1 to other processes. Connected advisories (Mandri...

[slackware-security] kdelibs

New kdelibs packages are available for Slackware 12.0 and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-1671 As well as from the KDE web site:...

[SECURITY] Fedora 8 Update: konversation-1.0.1-4.fc8

A simple and easy to use IRC client for KDE with support for strikeout; multi-channel joins; away / unaway messages; ignore list functionality; experimental support for foreign language characters; auto-connect to server; optional timestamps to chat windows; configurable background colors and muc...

[SECURITY] Fedora 7 Update: konversation-1.0.1-4.fc7

A simple and easy to use IRC client for KDE with support for strikeout; multi-channel joins; away / unaway messages; ignore list functionality; experimental support for foreign language characters; auto-connect to server; optional timestamps to chat windows; configurable background colors and muc...