Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

KDE Konqueror Cross-Domain Frame Loading Vulnerability

Solution:
Gentoo Linux has released advisory GLSA 200408-13 addressing this, and other issues. Please see the referenced advisory for further information. Users of affected packages are urged to execute the following commands with superuser privileges:
emerge sync
emerge -pv ">=kde-base/kdebase-3.2.3-r1"
emerge ">=kde-base/kdebase-3.2.3-r1"
emerge -pv ">=kde-base/kdelibs-3.2.3-r1"
emerge ">=kde-base/kdelibs-3.2.3-r1"

KDE has released an advisory (20040811-3) to address this issue. Please see the referenced advisory for more information.

OpenBSD has included patches to fix this issue in OpenBSD-current as of 14 Aug 2004. These patches have not been included in 3.4 or 3.5 at the time of this update.

Mandrake Linux has released an advisory (MDKSA-2004:086) along with fixes to address this, and other issues. Please see the referenced advisory for further information.

RedHat has released advisories (FEDORA-2004-290, FEDORA-2004-291) to address various issues affecting KDE in Fedora Core 1 and Core 2. Please see the referenced advisories for more information.

Conectiva Linux has released advisory CLA-2004:864 along with fixes dealing with this and other issues. Please see the referenced advisory for more information.

Red Hat has released an advisory (RHSA-2004:412-10) to address various issues affecting KDE in Red Hat Enterprise Linux. Please see the advisory in Web references for more information.


KDE Konqueror 3.0.5 b

KDE KDE 3.1.3

KDE Konqueror 3.1.5

KDE KDE 3.2

KDE Konqueror 3.2.3







 

Privacy Statement
Copyright 2008, SecurityFocus