- Committer: Bazaar Package Importer
- Date: 2009-10-14 09:57:26 UTC
- Revision ID: james.westby@ubuntu.com-20091014095726-ihp29zip0uranw46
* Non-maintainer upload by the testing Security Team.
* Fixed CVE-2009-1687: An integer overflow, leading to heap-based buffer
overflow was found in the KDE implementation of garbage collector for the
JavaScript language (KJS).
* Fixed CVE-2009-1690: KDE HTML parser incorrectly handled content, forming
the HTML page <head> element. A remote attacker could use this flaw to
cause a denial of service (konqueror crash) or, potentially, execute
arbitrary code, with the privileges of the user running "konqueror" web
browser, if the victim was tricked to open a specially-crafted HTML page.
(Closes: #534949)
* Fixed CVE-2009-1698: KDE's Cascading Style Sheets (CSS) parser incorrectly
handled content, forming the value of CSS "style" attribute. A remote
attacker could use this flaw to cause a denial of service (konqueror crash)
or potentially execute arbitrary code with the privileges of the user
running "konqueror" web browser, if the victim visited a specially-crafted
CSS equipped HTML page. (Closes: #534949)
* Fixed CVE-2009-2702: KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not
properly handle a '\0' character in a domain name in the Subject
Alternative Name field of an X.509 certificate, which allows
man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted
certificate issued by a legitimate Certification Authority (Closes: #546212)
* Fixed CVE-2009-1687: An integer overflow, leading to heap-based buffer
overflow was found in the KDE implementation of garbage collector for the
JavaScript language (KJS).
* Fixed CVE-2009-1690: KDE HTML parser incorrectly handled content, forming
the HTML page <head> element. A remote attacker could use this flaw to
cause a denial of service (konqueror crash) or, potentially, execute
arbitrary code, with the privileges of the user running "konqueror" web
browser, if the victim was tricked to open a specially-crafted HTML page.
(Closes: #534949)
* Fixed CVE-2009-1698: KDE's Cascading Style Sheets (CSS) parser incorrectly
handled content, forming the value of CSS "style" attribute. A remote
attacker could use this flaw to cause a denial of service (konqueror crash)
or potentially execute arbitrary code with the privileges of the user
running "konqueror" web browser, if the victim visited a specially-crafted
CSS equipped HTML page. (Closes: #534949)
* Fixed CVE-2009-2702: KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not
properly handle a '\0' character in a domain name in the Subject
Alternative Name field of an X.509 certificate, which allows
man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted
certificate issued by a legitimate Certification Authority (Closes: #546212)
| Filename | Latest Rev | Last Changed | Committer | Comment | Size | ||
|---|---|---|---|---|---|---|---|
 .. |
|||||||
admin
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
arts
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
dcop
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
debian
|
14 | 15 years ago | Bazaar Package Importer | Fix kdepart freeze with some replacements. (Closes |
|
||
|
dnssd
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
doc
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
interfaces
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kab
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kabc
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kate
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kcert
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kcmshell
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kconf_update
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kdecore
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kded
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kdefx
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kdeprint
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kdesu
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kdeui
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kdewidgets
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kdoctools
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
khtml
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kimgio
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kinit
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kio
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kioslave
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kjs
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kmdi
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
knewstuff
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kparts
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kresources
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kspell2
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kstyles
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kunittest
|
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 |
|
||
|
kutils
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
kwallet
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
libkmid
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
libkscreensaver
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
libltdl
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
licenses
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
mimetypes
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
pics
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
|
win
|
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 |
|
||
acinclude.m4 |
12 | 16 years ago | Bazaar Package Importer | Import upstream version 3.5.9 | 381 KB |
|
|
|
aclocal.m4 |
12 | 16 years ago | Bazaar Package Importer | Import upstream version 3.5.9 | 31.9 KB |
|
|
|
AUTHORS |
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 | 331 bytes |
|
|
|
common_texts.cpp |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 6.2 KB |
|
|
|
COMPILING |
3 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.1 | 4.5 KB |
|
|
|
COMPILING.html |
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 | 4.2 KB |
|
|
|
config.h.in |
9 | 17 years ago | Bazaar Package Importer | Import upstream version 3.5.6 | 25.6 KB |
|
|
configure |
13.1.1 | 15 years ago | Bazaar Package Importer | Import upstream version 3.5.10.dfsg.1 | 1.5 MB |
|
|
|
configure.files |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 834 bytes |
|
|
|
configure.in |
13.1.1 | 15 years ago | Bazaar Package Importer | Import upstream version 3.5.10.dfsg.1 | 85.3 KB |
|
|
|
configure.in.bot |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 4.7 KB |
|
|
|
configure.in.in |
5 | 17 years ago | Bazaar Package Importer | Import upstream version 3.5.3 | 12.1 KB |
|
|
|
configure.in.mid |
7 | 17 years ago | Bazaar Package Importer | Import upstream version 3.5.5 | 532 bytes |
|
|
|
COPYING |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 17.8 KB |
|
|
|
COPYING-DOCS |
7 | 17 years ago | Bazaar Package Importer | Import upstream version 3.5.5 | 19.9 KB |
|
|
|
COPYING.BSD |
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 | 1.1 KB |
|
|
|
COPYING.LIB |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 24.9 KB |
|
|
|
DEBUG |
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 | 6.5 KB |
|
|
|
INSTALL |
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 | 7.2 KB |
|
|
|
kde.pot |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 13.4 KB |
|
|
|
KDE2PORTING.html |
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 | 37.1 KB |
|
|
|
KDE3PORTING.html |
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 | 30.7 KB |
|
|
|
kdelibs.lsm |
13.1.1 | 15 years ago | Bazaar Package Importer | Import upstream version 3.5.10.dfsg.1 | 346 bytes |
|
|
|
Mainpage.dox |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 3.9 KB |
|
|
|
Makefile.am |
7 | 17 years ago | Bazaar Package Importer | Import upstream version 3.5.5 | 4.6 KB |
|
|
|
Makefile.am.in |
7 | 17 years ago | Bazaar Package Importer | Import upstream version 3.5.5 | 4.5 KB |
|
|
|
Makefile.cvs |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 401 bytes |
|
|
|
Makefile.in |
12 | 16 years ago | Bazaar Package Importer | Import upstream version 3.5.9 | 37.7 KB |
|
|
|
NAMING |
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 | 1.9 KB |
|
|
|
qt-messages.pot |
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 | 19.5 KB |
|
|
|
README |
13.1.1 | 15 years ago | Bazaar Package Importer | Import upstream version 3.5.10.dfsg.1 | 8.5 KB |
|
|
|
stamp-h.in |
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 | Empty |
|
|
|
subdirs |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 300 bytes |
|
|
|
TODO |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 12.1 KB |
|
|