Gentoo FoundationMGASA-2013-0269Updated kde packages fix security issues
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
88.9%
This update provides the last stable version of KDE for the 4.10.x branch. Some of the new packages fixes additional issues open on our tracker : - A memory leak in kde-workspace (kde #314919 & mga #7953) - A memory leak in kmix ( mga #10702 & kde #309464 ) - A packaging issue affecting kdebase4-runtime (mga #10387) & another affecting kdegraphics-thumbnailers (mga #10388) - A crash of akonadi davgroupware ressource ( mga #10396) - Several security issues affecting libraw & so libkdcraw ( CVE-2013-2126, CVE-2013-2127, - Several security fixes affecting kdebase4-workspace ( CVE-2013-4132 & CVE-2013-4133 ) See the referenced buglist for the complete list of fixes.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 3 | noarch | analitza | < 4.10.5-1.1 | analitza-4.10.5-1.1.mga3 |
| Mageia | 3 | noarch | ark | < 4.10.5-1.1 | ark-4.10.5-1.1.mga3 |
| Mageia | 3 | noarch | blinken | < 4.10.5-1.1 | blinken-4.10.5-1.1.mga3 |
| Mageia | 3 | noarch | bomber | < 4.10.5-1.1 | bomber-4.10.5-1.1.mga3 |
| Mageia | 3 | noarch | bovo | < 4.10.5-1.1 | bovo-4.10.5-1.1.mga3 |
| Mageia | 3 | noarch | cantor | < 4.10.5-1.1 | cantor-4.10.5-1.1.mga3 |
| Mageia | 3 | noarch | dragon | < 4.10.5-1.1 | dragon-4.10.5-1.1.mga3 |
| Mageia | 3 | noarch | ffmpegthumbs | < 4.10.5-1.1 | ffmpegthumbs-4.10.5-1.1.mga3 |
| Mageia | 3 | noarch | filelight | < 4.10.5-1.1 | filelight-4.10.5-1.1.mga3 |
| Mageia | 3 | noarch | granatier | < 4.10.5-1.1 | granatier-4.10.5-1.1.mga3 |
References
bugs.kde.org/buglist.cgi?query_format=advanced&short_desc_type=allwordssubstr&short_desc=&long_desc_type=substring&long_desc=&bug_file_loc_type=allwordssubstr&bug_file_loc=&keywords_type=allwords&keywords=&bug_status=RESOLVED&bug_status=VERIFIED&bug_status=CLOSED&emailtype1=substring&email1=&emailassigned_to2=1&emailreporter2=1&emailcc2=1&emailtype2=substring&email2=&bugidtype=include&bug_id=&votes=&chfieldfrom=2013-06-01&chfieldto=Now&chfield=cf_versionfixedin&chfieldvalue=4.10.5&cmdtype=doit&order=Bug+Number&field0-0-0=noop&type0-0-0=noop&value0-0-0=
bugs.mageia.org/show_bug.cgi?id=10600
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
88.9%