openSUSE Security Update : kdebase4-workspace (openSUSE-SU-2013:1291-1)

kdebase4-workspace received fixes for : - KDM: a potential crash in crypt was fixed bnc829857, CVE-2013-4132 - Fixes plasma systemtray memory leak with legacy icons kde314919, bnc817932, bnc829857, CVE-2013-4133 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

CVE-2013-4132

KDE-Workspace 4.10.5 and earlier does not properly handle the return value of the glibc 2.17 crypt and pwencrypt functions, which allows remote attackers to cause a denial of service NULL pointer dereference and crash via 1 an invalid salt or a 2 DES or 3 MD5 encrypted password, when FIPS-140 is...

Null pointer dereference

KDE-Workspace 4.10.5 and earlier does not properly handle the return value of the glibc 2.17 crypt and pwencrypt functions, which allows remote attackers to cause a denial of service NULL pointer dereference and crash via 1 an invalid salt or a 2 DES or 3 MD5 encrypted password, when FIPS-140 is...

CVE-2013-4132

KDE-Workspace 4.10.5 and earlier does not properly handle the return value of the glibc 2.17 crypt and pwencrypt functions, which allows remote attackers to cause a denial of service NULL pointer dereference and crash via 1 an invalid salt or a 2 DES or 3 MD5 encrypted password, when FIPS-140 is...

CVE-2013-4132

CVE-2013-4132 affects KDE Workspace kdebase4-workspace 4.10.5 and earlier. The issue is a NULL pointer dereference in the crypt()/pw_encrypt paths when handling certain salts or DES/MD5 passwords, exploitable to cause a denial of service (crash) in KDM or KCheckPass when FIPS-140 is enabled. Publ...

CVE-2013-4132

KDE-Workspace 4.10.5 and earlier does not properly handle the return value of the glibc 2.17 crypt and pwencrypt functions, which allows remote attackers to cause a denial of service NULL pointer dereference and crash via 1 an invalid salt or a 2 DES or 3 MD5 encrypted password, when FIPS-140 is...

Slackware: Security Advisory (SSA:2010-110-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : kdebase on SL5.x, SL4.x i386/x86_64

Kees Huijgen found a flaw in the way KDM handled logins when autologin and 'shutdown with password' were enabled. A local user would have been able to login via KDM as any user without requiring a password. CVE-2007-4569 Two Konqueror address spoofing flaws were discovered. A malicious website...

CentOS Update for xorg-x11-server-common CESA-2012:0939 centos6

Check for the Version of xorg-x11-server-common OpenVAS Vulnerability Test CentOS Update for xorg-x11-server-common CESA-2012:0939 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

CentOS Update for xorg-x11-server-common CESA-2012:0939 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE 11 Security Update : kdm (SAT Patch Number 2136)

The KDE display manager kdm contains a race condition which allows local attackers to make arbitrary files orld writable. CVE-2010-0436 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 10 Security Update : kdm (ZYPP Patch Number 6941)

The KDE display manager kdm contains a race condition which allows local attackers to make arbitrary files orld writable. CVE-2010-0436 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

MDVA-2009:229-1 : mandriva-kde4-config

When the user migrates from a kde3 desktopMandriva 2008.1 to a full kde4 desktop, kdm doesn't start. This update fixes this issue. Update: With previous mandriva-kde4-config advisory, the users plasma configurations, such as wallpaper and icon positioning could be lost. This update fixes this...

Fedora 12 : PyQt4-4.7.2-2.fc12 / kdeaccessibility-4.4.2-1.fc12 / kdeadmin-4.4.2-1.fc12 / etc (2010-6096)

This update set updates the KDE Software Compilation KDE SC to KDE SC 4.4.2, which has a number of improvements: Possible crashes in Plasma, Dolphin and Okular have been fixed The Microblog applet now shows the correct time in the timeline The audioplayer KRunner plugin has been fixed to not free...

Fedora 13 : kdebase-workspace-4.4.2-5.fc13 (2010-6605)

This build includes a couple of small powerdevil patches see kde bugs 221637, 221637, fix icon name in plasma-konsole patch: use XDG icon instead of kappfinder one, initial attempts at kdm/plymouth integration, upstream kdm security fix for CVE-2010-0436 Note that Tenable Network Security has...

Fedora 11 : PyQt4-4.7.2-2.fc11 / kdeaccessibility-4.4.2-1.fc11 / kdeadmin-4.4.2-1.fc11 / etc (2010-6077)

This update set updates the KDE Software Compilation KDE SC to KDE SC 4.4.2, which has a number of improvements: Possible crashes in Plasma, Dolphin and Okular have been fixed The Microblog applet now shows the correct time in the timeline The audioplayer KRunner plugin has been fixed to not free...

FreeBSD Ports: kdebase

The remote host is missing an update to the system as announced in the referenced advisory. VID 3987c5d1-47a9-11df-a0d5-0016d32f24fb OpenVAS Vulnerability Test $ Description: Auto generated from VID 3987c5d1-47a9-11df-a0d5-0016d32f24fb Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian Security Advisory DSA 2037-1 (kdm (kdebase))

The remote host is missing an update to kdm kdebase announced via advisory DSA 2037-1. OpenVAS Vulnerability Test $Id: deb20371.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2037-1 kdm kdebase Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

[slackware-security] kdebase-workspace

New kdebase-workspace packages are available for Slackware 13.0 and -current to fix a security issue with KDM. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/kdebase-workspace-4.2.4-i486-2slack13.0.txz: Rebuilt. Patched a security issue with KDM. For more information, se...

USN-932-1: KDM vulnerability

Sebastian Krahmer discovered a race condition in the KDE Display Manager KDM. A local attacker could exploit this to change the permissions on arbitrary files, thus allowing privilege escalation...