kdebase security update

2007-06-1319:26:11

CentOS Project

lists.centos.org

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.014

Percentile

86.6%

JSON

CentOS Errata and Security Advisory CESA-2007:0494

The kdebase packages provide the core applications for KDE, the K Desktop
Environment. These core packages include Konqueror, the web browser and
file manager.

A problem with the interaction between the Flash Player and the Konqueror
web browser was found. The problem could lead to key presses leaking to the
Flash Player applet instead of the browser (CVE-2007-2022).

Users of Konqueror who have installed the Adobe Flash Player plugin should
upgrade to these updated packages, which contain a patch provided by Dirk
Müller that protects against this issue.

Affected packages:
kdebase
kdebase-devel

Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0494

OSVersionArchitecturePackageVersionFilename
CentOS3ia64kdebase< 3.1.3-5.16kdebase-3.1.3-5.16.ia64.rpm
CentOS3ia64kdebase-devel< 3.1.3-5.16kdebase-devel-3.1.3-5.16.ia64.rpm
CentOS4ia64kdebase< 3.3.1-5.19.rhel4kdebase-3.3.1-5.19.rhel4.ia64.rpm
CentOS4ia64kdebase-devel< 3.3.1-5.19.rhel4kdebase-devel-3.3.1-5.19.rhel4.ia64.rpm
CentOS3i386kdebase< 3.1.3-5.16kdebase-3.1.3-5.16.i386.rpm
CentOS3i386kdebase-devel< 3.1.3-5.16kdebase-devel-3.1.3-5.16.i386.rpm
CentOS3i386kdebase< 3.1.3-5.16kdebase-3.1.3-5.16.i386.rpm
CentOS3x86_64kdebase< 3.1.3-5.16kdebase-3.1.3-5.16.x86_64.rpm
CentOS3x86_64kdebase-devel< 3.1.3-5.16kdebase-devel-3.1.3-5.16.x86_64.rpm
CentOS5i386kdebase< 3.5.4-13.6.el5.centoskdebase-3.5.4-13.6.el5.centos.i386.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	3	ia64	kdebase	< 3.1.3-5.16	kdebase-3.1.3-5.16.ia64.rpm
CentOS	3	ia64	kdebase-devel	< 3.1.3-5.16	kdebase-devel-3.1.3-5.16.ia64.rpm
CentOS	4	ia64	kdebase	< 3.3.1-5.19.rhel4	kdebase-3.3.1-5.19.rhel4.ia64.rpm
CentOS	4	ia64	kdebase-devel	< 3.3.1-5.19.rhel4	kdebase-devel-3.3.1-5.19.rhel4.ia64.rpm
CentOS	3	i386	kdebase	< 3.1.3-5.16	kdebase-3.1.3-5.16.i386.rpm
CentOS	3	i386	kdebase-devel	< 3.1.3-5.16	kdebase-devel-3.1.3-5.16.i386.rpm
CentOS	3	i386	kdebase	< 3.1.3-5.16	kdebase-3.1.3-5.16.i386.rpm
CentOS	3	x86_64	kdebase	< 3.1.3-5.16	kdebase-3.1.3-5.16.x86_64.rpm
CentOS	3	x86_64	kdebase-devel	< 3.1.3-5.16	kdebase-devel-3.1.3-5.16.x86_64.rpm
CentOS	5	i386	kdebase	< 3.5.4-13.6.el5.centos	kdebase-3.5.4-13.6.el5.centos.i386.rpm