- Committer: Bazaar Package Importer
- Date: 2009-10-14 09:57:26 UTC
- Revision ID: james.westby@ubuntu.com-20091014095726-ihp29zip0uranw46
* Non-maintainer upload by the testing Security Team.
* Fixed CVE-2009-1687: An integer overflow, leading to heap-based buffer
overflow was found in the KDE implementation of garbage collector for the
JavaScript language (KJS).
* Fixed CVE-2009-1690: KDE HTML parser incorrectly handled content, forming
the HTML page <head> element. A remote attacker could use this flaw to
cause a denial of service (konqueror crash) or, potentially, execute
arbitrary code, with the privileges of the user running "konqueror" web
browser, if the victim was tricked to open a specially-crafted HTML page.
(Closes: #534949)
* Fixed CVE-2009-1698: KDE's Cascading Style Sheets (CSS) parser incorrectly
handled content, forming the value of CSS "style" attribute. A remote
attacker could use this flaw to cause a denial of service (konqueror crash)
or potentially execute arbitrary code with the privileges of the user
running "konqueror" web browser, if the victim visited a specially-crafted
CSS equipped HTML page. (Closes: #534949)
* Fixed CVE-2009-2702: KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not
properly handle a '\0' character in a domain name in the Subject
Alternative Name field of an X.509 certificate, which allows
man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted
certificate issued by a legitimate Certification Authority (Closes: #546212)
* Fixed CVE-2009-1687: An integer overflow, leading to heap-based buffer
overflow was found in the KDE implementation of garbage collector for the
JavaScript language (KJS).
* Fixed CVE-2009-1690: KDE HTML parser incorrectly handled content, forming
the HTML page <head> element. A remote attacker could use this flaw to
cause a denial of service (konqueror crash) or, potentially, execute
arbitrary code, with the privileges of the user running "konqueror" web
browser, if the victim was tricked to open a specially-crafted HTML page.
(Closes: #534949)
* Fixed CVE-2009-1698: KDE's Cascading Style Sheets (CSS) parser incorrectly
handled content, forming the value of CSS "style" attribute. A remote
attacker could use this flaw to cause a denial of service (konqueror crash)
or potentially execute arbitrary code with the privileges of the user
running "konqueror" web browser, if the victim visited a specially-crafted
CSS equipped HTML page. (Closes: #534949)
* Fixed CVE-2009-2702: KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not
properly handle a '\0' character in a domain name in the Subject
Alternative Name field of an X.509 certificate, which allows
man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted
certificate issued by a legitimate Certification Authority (Closes: #546212)
| Filename | Latest Rev | Last Changed | Committer | Comment | Size | ||
|---|---|---|---|---|---|---|---|
 ..
|
|||||||
configure.in.in |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 2.1 KB |
|
|
|
kcpuinfo.cpp |
7 | 17 years ago | Bazaar Package Importer | Import upstream version 3.5.5 | 5.8 KB |
|
|
|
kcpuinfo.h |
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 | 2.5 KB |
|
|
|
kdrawutil.cpp |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 8.6 KB |
|
|
|
kdrawutil.h |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 6.4 KB |
|
|
|
kimageeffect.cpp |
5 | 17 years ago | Bazaar Package Importer | Import upstream version 3.5.3 | 165 KB |
|
|
|
kimageeffect.h |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 31.1 KB |
|
|
|
kpixmap.cpp |
5 | 17 years ago | Bazaar Package Importer | Import upstream version 3.5.3 | 9.9 KB |
|
|
|
kpixmap.h |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 7 KB |
|
|
|
kpixmapeffect.cpp |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 8.9 KB |
|
|
|
kpixmapeffect.h |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 7.9 KB |
|
|
|
kpixmapsplitter.cpp |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 2.3 KB |
|
|
|
kpixmapsplitter.h |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 3.3 KB |
|
|
|
kstyle.cpp |
9 | 17 years ago | Bazaar Package Importer | Import upstream version 3.5.6 | 59.5 KB |
|
|
|
kstyle.h |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 12 KB |
|
|
|
libkdefx.nmcheck |
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 | 199 bytes |
|
|
|
libkdefx_weak.nmcheck |
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 | 42 bytes |
|
|
|
Mainpage.dox |
1 | 19 years ago | Bazaar Package Importer | Import upstream version 3.4.0 | 1.3 KB |
|
|
|
Makefile.am |
2 | 18 years ago | Bazaar Package Importer | Import upstream version 3.5.0 | 1.6 KB |
|
|
|
Makefile.in |
12 | 16 years ago | Bazaar Package Importer | Import upstream version 3.5.9 | 31.4 KB |
|
|