Fedora alert FEDORA-2014-11448 (baloo)

From:
    	     
 
updates@fedoraproject.org 
To:
    	     
 
package-announce@lists.fedoraproject.org 
Subject:
    	     
 
[SECURITY] Fedora 20 Update: baloo-4.14.1-1.fc20 
Date:
    	     
 
Sat, 27 Sep 2014 09:47:43 +0000
Message-ID:
    	     
 
<20140927094746.097AE220D2@bastion01.phx2.fedoraproject.org>
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-11448
2014-09-25 09:30:40
--------------------------------------------------------------------------------

Name        : baloo
Product     : Fedora 20
Version     : 4.14.1
Release     : 1.fc20
URL         : https://projects.kde.org/projects/kde/kdelibs/baloo
Summary     : A framework for searching and managing metadata
Description :
A framework for searching and managing metadata.

--------------------------------------------------------------------------------
Update Information:

KDE released updates for its Applications and Development Platform, the first in a series of
monthly stabilization updates to the 4.14 series.  This update also includes the latest stable
calligra-2.8.6 and digikam-4.3.0 releases.  See also http://kde.org/announcements/4.14/ ,
http://kde.org/announcements/announce-4.14.1.php ,
https://www.calligra.org/news/calligra-2-8-6-released/ , https://www.digikam.org/node/718


The update also addresses CVE-2014-5033, fixed in kdelibs ≥ 4.14.0: KAuth was calling PolicyKit 1
(polkit) in an insecure way.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1094890 - CVE-2014-5033 polkit-qt: insecure calling of polkit
        https://bugzilla.redhat.com/show_bug.cgi?id=1094890
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update baloo' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-...