| Description: | Description:
The remote host is missing an update to kdelibs
announced via advisory FEDORA-2005-594.
Libraries for the K Desktop Environment.
KDE Libraries include: kdecore (KDE core library), kdeui (user
interface), kfm (file manager), khtmlw (HTML widget), kio
(Input/Output, networking), kspell (spelling checker), jscript
(javascript), kab (addressbook), kimgio (image manipulation).
Update Information:
A flaw was discovered affecting Kate, the KDE advanced text editor, and
Kwrite. Depending on system settings it may be possible for a local user
to read the backup files created by Kate or Kwrite. The Common
Vulnerabilities and Exposures project assigned the name CVE-2005-1920 to
this issue.
Users of Kate or Kwrite should update to this erratum package which
contains a backported patch from the KDE security team correcting this issue.
* Tue Jul 12 2005 Than Ngo 6:3.3.1-2.14.FC3
- Kate backup file permission leak, apply patch to fix this vulnerabilities
CVE-2005-1920
- apply cvs patch to get rid of warning Mutex destroy failure, #160922
* Wed May 4 2005 Than Ngo 6:3.3.1-2.13.FC3
- new patch to fix kimgio input validation vulnerabilities, CVE-2005-1046
Solution: Apply the appropriate updates.
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
This update can also be installed with the Update Agent
you can
launch the Update Agent with the 'up2date' command.
http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2005-594
Risk factor : High
CVSS Score:
7.5
|
