User: Password:
Subscribe / Log in / New account

Conectiva alert CLA-2005:934 (kdenetwork)

From:  Conectiva Updates <>
Subject:  [CLA-2005:934] Conectiva Security Announcement - kdenetwork
Date:  Wed, 16 Mar 2005 14:31:51 -0300

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : kdenetwork SUMMARY : Fix for kppp vulnerability DATE : 2005-03-16 14:31:00 ID : CLA-2005:934 RELEVANT RELEASES : 9 - ------------------------------------------------------------------------- DESCRIPTION kppp[1] is the KDE[2] internet dialer. This announcement fixes a privileged file descriptors leak vulnerability[3,4] which could allow local attackers to hijack a system's domain name resolution function. SOLUTION It is recommended that all kppp users upgrade their packages. REFERENCES 1. 2. 3. 4. UPDATED PACKAGES ADDITIONAL INSTRUCTIONS The apt tool can be used to perform RPM packages upgrades: - run: apt-get update - after that, execute: apt-get upgrade Detailed instructions regarding the use of apt and upgrade examples can be found at - ------------------------------------------------------------------------- All packages are signed with Conectiva's GPG key. The key and instructions on how to import it can be found at Instructions on how to check the signatures of the RPM packages can be found at - ------------------------------------------------------------------------- All our advisories and generic update instructions can be viewed at - ------------------------------------------------------------------------- Copyright (c) 2004 Conectiva Inc. - ------------------------------------------------------------------------- subscribe: unsubscribe: -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see iD8DBQFCOG2G42jd0JmAcZARAtDJAKCto7Q6AB4Z83nNHac/QsrmhtMtsACcC5PB wdfLkeqYPaB+/1jk34iO7mY= =ztzs -----END PGP SIGNATURE-----

(Log in to post comments)

Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds