|
|
KDE Insecure Temporary Directory Symlink Vulnerability
Solution: Gentoo Linux has released advisory GLSA 200408-13 addressing this, and other issues. Please see the referenced advisory for further information. Users of affected packages are urged to execute the following commands with superuser privileges: emerge sync emerge -pv ">=kde-base/kdebase-3.2.3-r1" emerge ">=kde-base/kdebase-3.2.3-r1" emerge -pv ">=kde-base/kdelibs-3.2.3-r1" emerge ">=kde-base/kdelibs-3.2.3-r1" OpenBSD has included patches to fix this issue in OpenBSD-current as of 14 Aug 2004. These patches have not been included in 3.4 or 3.5 at the time of this update. Debian has released an advisory (DSA 539-1) to address this issue. Please see the referenced advisory for more information. Mandrake Linux has released an advisory (MDKSA-2004:086) along with fixes to address this, and other issues. Please see the referenced advisory for further information. KDE has released patches resolving this issue: RedHat has released advisories (FEDORA-2004-290, FEDORA-2004-291) to address various issues affecting KDE in Fedora Core 1 and Core 2. Please see the referenced advisories for more information. Conectiva Linux has released advisory CLA-2004:864 along with fixes dealing with this and other issues. Please see the referenced advisory for more information. Red Hat has released an advisory (RHSA-2004:412-10) to address various issues affecting KDE in Red Hat Enterprise Linux. Please see the advisory in Web references for more information. KDE KDE 2.2.2
KDE KDE 3.0
KDE KDE 3.0.1
KDE KDE 3.0.2
KDE KDE 3.0.3 a
KDE KDE 3.0.3
KDE KDE 3.0.4
KDE KDE 3.0.5
KDE KDE 3.0.5 b
KDE KDE 3.0.5 a
KDE KDE 3.1
KDE KDE 3.1.1
KDE KDE 3.1.1 a
KDE KDE 3.1.2
KDE KDE 3.1.3
KDE KDE 3.1.4
KDE KDE 3.1.5
KDE KDE 3.2
KDE KDE 3.2.1
KDE KDE 3.2.2
KDE KDE 3.2.3
|
|
Privacy Statement |