kdelibs-3.5.5-11.26.AXS3

エラータID: AXSA:2011-354:01

Release date: 
Thursday, November 17, 2011 - 12:41
Subject: 
kdelibs-3.5.5-11.26.AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

KDE Libraries include: kdecore (KDE core library), kdeui (user interface), kfm (file manager), khtmlw (HTML widget), kio (Input/Output, networking), kspell (spelling checker), jscript (javascript), kab (addressbook), kimgio (image manipulation).
Security bugs fixed with this release:
CVE-2011-3365
No information available at the time of writing, please refer to the CVE links below.

Solution: 

Update packages.

CVEs: 
CVE-2011-3365
The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.


Additional Info: 

N/A

Download: 

SRPMS
  1. kdelibs-3.5.5-11.26.AXS3.src.rpm
    MD5: 049cc3702df999015e5d201a631aa190
    SHA-256: 04ea6c70ac7aafb30a67679c592e451458e34385f481bfbac2e806ceef110f73
    Size: 14.90 MB

Asianux Server 3 for x86
  1. kdelibs-3.5.5-11.26.AXS3.i386.rpm
    MD5: 5b2c995076aabf3b66f313b8f7cc9609
    SHA-256: 49a848ef09ab5c2ce2e64f609039c6e213ff1649bdbbbf2aeb83b3d01efba7a2
    Size: 12.95 MB
  2. kdelibs-devel-3.5.5-11.26.AXS3.i386.rpm
    MD5: c41c9963f9887413a34465ac12f9dfae
    SHA-256: 253960387d838b967d1cddd9ac2c6ad1149a2bc4a7ab22da888930e380d66b16
    Size: 1.30 MB

Asianux Server 3 for x86_64
  1. kdelibs-3.5.5-11.26.AXS3.x86_64.rpm
    MD5: be057f547342763075ee5cb0e283836e
    SHA-256: ec123820778747befa5e34e3847152f65de2c81ab53649863a693228c86677c3
    Size: 13.10 MB
  2. kdelibs-devel-3.5.5-11.26.AXS3.x86_64.rpm
    MD5: 96f3e54d6cdaa6dbccbda873006119b8
    SHA-256: 74bb0d5af926894d42cdee76ed0b5d514520f9880aee40399f72a0ed15917799
    Size: 1.30 MB