Mageia alert MGASA-2014-0432 (kde4)
| From: | Mageia Updates <buildsystem-daemon@mageia.org> | |
| To: | updates-announce@ml.mageia.org | |
| Subject: | [updates-announce] MGASA-2014-0432: Updated KDE 4 and related packages move to KDE 4.12.5 | |
| Date: | Wed, 29 Oct 2014 12:30:59 +0100 | |
| Message-ID: | <20141029113059.364CE5D442@valstar.mageia.org> |
MGASA-2014-0432 - Updated KDE 4 and related packages move to KDE 4.12.5 Publication date: 29 Oct 2014 URL: http://advisories.mageia.org/MGASA-2014-0432.html Type: security Affected Mageia releases: 4 CVE: CVE-2014-3494, CVE-2014-4607, CVE-2014-5033, CVE-2014-6053, CVE-2014-6054, CVE-2014-6055 Description: This KDE 4 update provides an upgrade to the last stable version of KDE Applications and Development Platform for the 4.12 series, and updates Plasma Workspaces to 4.11.12. This update fixes several security vulnerabilities - KMail/KIO POP3 SSL MITM Flaw (CVE-2014-3494 - mga#13545) - KAuth PID Reuse Flaw (CVE-2014-5033 - mga#13792) - krfb: possible denial of service or code execution via integer overflow (CVE-2014-4607 - mga#13933) - krfb: multiple security issues in libvncserver (mga#14205) (CVE-2014-6053, CVE-2014-6054, CVE-2014-6055) and additional issues - poxml is compiled without antlr (mga#12612) - crashes in bluedevil (mga#12751, mga#13618, mga#13728) - kdelibs file dialog isn't properly translated in pure Qt apps (mga#12982) - kate: self-closing xml tag breaks indentation (mga#13275, bko#330174) - krdc missing dependency on freerdp (mga#13292) - lock screen: can't start a new session after playing around with buttons (mga#13300, bko#331761) - kbreakout missing dependency on libkdegames-corebindings (mga#13531) - meinproc4 doesn't substitute entity with fixed libxml2 (mga#13555, mga#13559, bko#335001) - calligra-words missing dependency on soprano-plugin-redland (mga#12008) - digikam can't export to flickr (mga#13778, bko#336835) See the referenced buglists in KDE announcements for the complete list of fixes. References: - https://bugs.mageia.org/show_bug.cgi?id=13221 - https://www.kde.org/announcements/4.12 - https://www.kde.org/announcements/announce-4.12.1.php - https://www.kde.org/announcements/announce-4.12.2.php - https://www.kde.org/announcements/announce-4.12.3.php - https://www.kde.org/announcements/announce-4.12.4.php - https://www.kde.org/announcements/announce-4.12.5.php - http://www.kde.org/info/security/advisory-20140618-1.txt - https://lists.fedoraproject.org/pipermail/package-announc... - https://bugs.mageia.org/show_bug.cgi?id=13545 - http://www.kde.org/info/security/advisory-20140730-1.txt - https://lists.fedoraproject.org/pipermail/package-announc... - https://lists.fedoraproject.org/pipermail/package-announc... - https://bugs.mageia.org/show_bug.cgi?id=13792 - http://www.kde.org/info/security/advisory-20140803-1.txt - https://lists.fedoraproject.org/pipermail/package-announc... - https://bugs.mageia.org/show_bug.cgi?id=13933 - https://www.kde.org/info/security/advisory-20140923-1.txt - http://www.ocert.org/advisories/ocert-2014-007.html - https://lists.fedoraproject.org/pipermail/package-announc... - https://bugs.mageia.org/show_bug.cgi?id=14205 - https://bugs.mageia.org/show_bug.cgi?id=12612 - https://bugs.mageia.org/show_bug.cgi?id=12751 - https://bugs.mageia.org/show_bug.cgi?id=13618 - https://bugs.mageia.org/show_bug.cgi?id=13728 - https://bugs.mageia.org/show_bug.cgi?id=12982 - https://bugs.mageia.org/show_bug.cgi?id=13275 - https://bugs.kde.org/show_bug.cgi?id=330174 - https://bugs.mageia.org/show_bug.cgi?id=13292 - https://bugs.mageia.org/show_bug.cgi?id=13300 - https://bugs.kde.org/show_bug.cgi?id=331761 - https://bugs.mageia.org/show_bug.cgi?id=13531 - https://bugs.mageia.org/show_bug.cgi?id=13555 - https://bugs.mageia.org/show_bug.cgi?id=13559 - https://bugs.kde.org/show_bug.cgi?id=335001 - https://bugs.mageia.org/show_bug.cgi?id=12008 - https://bugs.mageia.org/show_bug.cgi?id=13778 - https://bugs.kde.org/show_bug.cgi?id=336835 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3494 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4607 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5033 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6053 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6054 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6055 SRPMS: - 4/core/akonadi-1.11.0-1.mga4 - 4/core/amor-4.12.5-1.mga4 - 4/core/analitza-4.12.5-1.mga4 - 4/core/ark-4.12.5-1.1.mga4 - 4/core/blinken-4.12.5-1.mga4 - 4/core/bluedevil-2.0.0-0.git20140216.1.1.mga4 - 4/core/bomber-4.12.5-1.mga4 - 4/core/bovo-4.12.5-1.mga4 - 4/core/calligra-2.7.5-1.1.mga4 - 4/core/cantor-4.12.5-1.mga4 - 4/core/cervisia-4.12.5-1.mga4 - 4/core/digikam-3.5.0-3.2.mga4 - 4/core/dolphin-plugins-4.12.5-1.mga4 - 4/core/dragon-4.12.5-1.mga4 - 4/core/ffmpegthumbs-4.12.5-1.mga4 - 4/core/filelight-4.12.5-1.mga4 - 4/core/granatier-4.12.5-1.mga4 - 4/core/gwenview-4.12.5-1.mga4 - 4/core/jovie-4.12.5-1.mga4 - 4/core/juk-4.12.5-1.mga4 - 4/core/kaccessible-4.12.5-1.mga4 - 4/core/kactivities-4.12.5-1.mga4 - 4/core/kajongg-4.12.5-1.mga4 - 4/core/kalgebra-4.12.5-1.mga4 - 4/core/kalzium-4.12.5-1.mga4 - 4/core/kamera-4.12.5-1.mga4 - 4/core/kanagram-4.12.5-1.mga4 - 4/core/kapman-4.12.5-1.mga4 - 4/core/kapptemplate-4.12.5-1.mga4 - 4/core/kate-4.12.5-1.mga4 - 4/core/katomic-4.12.5-1.mga4 - 4/core/kblackbox-4.12.5-1.mga4 - 4/core/kblocks-4.12.5-1.mga4 - 4/core/kbounce-4.12.5-1.mga4 - 4/core/kbreakout-4.12.5-1.mga4 - 4/core/kbruch-4.12.5-1.mga4 - 4/core/kcachegrind-4.12.5-1.1.mga4 - 4/core/kcalc-4.12.5-1.mga4 - 4/core/kcharselect-4.12.5-1.mga4 - 4/core/kcolorchooser-4.12.5-1.mga4 - 4/core/kcron-4.12.5-1.mga4 - 4/core/kde-base-artwork-4.12.5-1.mga4 - 4/core/kde-dev-scripts-4.12.5-1.mga4 - 4/core/kde-dev-utils-4.12.5-1.mga4 - 4/core/kde-l10n-4.12.5-1.mga4 - 4/core/kde-wallpapers-4.12.5-1.mga4 - 4/core/kde4-audiocd-4.12.5-1.mga4 - 4/core/kdeartwork4-4.12.5-1.mga4 - 4/core/kdebase4-4.12.5-1.1.mga4 - 4/core/kdebase4-runtime-4.12.5-1.1.mga4 - 4/core/kdebase4-workspace-4.11.12-1.mga4 - 4/core/kdegraphics-mobipocket-4.12.5-1.mga4 - 4/core/kdegraphics-strigi-analyzer-4.12.5-1.mga4 - 4/core/kdegraphics-thumbnailers-4.12.5-1.mga4 - 4/core/kdelibs4-4.12.5-1.1.mga4 - 4/core/kdenetwork-filesharing-4.12.5-1.mga4 - 4/core/kdenetwork-strigi-analyzers-4.12.5-1.mga4 - 4/core/kdepim4-4.12.5-1.mga4 - 4/core/kdepim4-runtime-4.12.5-1.mga4 - 4/core/kdepimlibs4-4.12.5-1.mga4 - 4/core/kdeplasma-addons-4.12.5-1.1.mga4 - 4/core/kdesdk-kioslaves-4.12.5-1.mga4 - 4/core/kdesdk-strigi-analyzers-4.12.5-1.mga4 - 4/core/kdesdk-thumbnailers-4.12.5-1.mga4 - 4/core/kdewebdev4-4.12.5-1.mga4 - 4/core/kdf-4.12.5-1.mga4 - 4/core/kdiamond-4.12.5-1.mga4 - 4/core/kdnssd-4.12.5-1.mga4 - 4/core/kfloppy-4.12.5-1.mga4 - 4/core/kfourinline-4.12.5-1.mga4 - 4/core/kgamma-4.12.5-1.mga4 - 4/core/kgeography-4.12.5-1.mga4 - 4/core/kget-4.12.5-1.mga4 - 4/core/kgoldrunner-4.12.5-1.mga4 - 4/core/kgpg-4.12.5-1.mga4 - 4/core/khangman-4.12.5-1.mga4 - 4/core/kig-4.12.5-1.mga4 - 4/core/kigo-4.12.5-1.mga4 - 4/core/killbots-4.12.5-1.mga4 - 4/core/kimono-4.12.5-1.mga4 - 4/core/kiriki-4.12.5-1.mga4 - 4/core/kiten-4.12.5-1.mga4 - 4/core/kjumpingcube-4.12.5-1.mga4 - 4/core/klettres-4.12.5-1.mga4 - 4/core/klickety-4.12.5-1.mga4 - 4/core/klines-4.12.5-1.mga4 - 4/core/kmag-4.12.5-1.mga4 - 4/core/kmahjongg-4.12.5-1.mga4 - 4/core/kmines-4.12.5-1.mga4 - 4/core/kmix-4.12.5-1.mga4 - 4/core/kmousetool-4.12.5-1.mga4 - 4/core/kmouth-4.12.5-1.mga4 - 4/core/kmplot-4.12.5-1.mga4 - 4/core/knavalbattle-4.12.5-1.mga4 - 4/core/knetwalk-4.12.5-1.mga4 - 4/core/kolf-4.12.5-1.mga4 - 4/core/kollision-4.12.5-1.mga4 - 4/core/kolourpaint-4.12.5-1.mga4 - 4/core/kompare-4.12.5-1.mga4 - 4/core/konquest-4.12.5-1.mga4 - 4/core/konsole-4.12.5-1.mga4 - 4/core/kopete-4.12.5-1.mga4 - 4/core/korundum-4.12.5-1.mga4 - 4/core/kpat-4.12.5-1.mga4 - 4/core/kphotoalbum-4.4-2.1.mga4 - 4/core/kppp-4.12.5-1.mga4 - 4/core/krdc-4.12.5-1.mga4 - 4/core/kremotecontrol-4.12.5-1.mga4 - 4/core/kreversi-4.12.5-1.1.mga4 - 4/core/krfb-4.12.5-1.2.mga4 - 4/core/kross-interpreters-4.12.5-1.mga4 - 4/core/kruler-4.12.5-1.mga4 - 4/core/ksaneplugin-4.12.5-1.mga4 - 4/core/kscd-4.12.5-1.mga4 - 4/core/kshisen-4.12.5-1.mga4 - 4/core/ksirk-4.12.5-1.mga4 - 4/core/ksnakeduel-4.12.5-1.mga4 - 4/core/ksnapshot-4.12.5-1.mga4 - 4/core/kspaceduel-4.12.5-1.mga4 - 4/core/ksquares-4.12.5-1.mga4 - 4/core/kstars-4.12.5-1.mga4 - 4/core/ksudoku-4.12.5-1.mga4 - 4/core/ksystemlog-4.12.5-1.mga4 - 4/core/kteatime-4.12.5-1.mga4 - 4/core/ktimer-4.12.5-1.mga4 - 4/core/ktouch-4.12.5-1.mga4 - 4/core/ktuberling-4.12.5-1.mga4 - 4/core/kturtle-4.12.5-1.mga4 - 4/core/ktux-4.12.5-1.mga4 - 4/core/kubrick-4.12.5-1.mga4 - 4/core/kuser-4.12.5-1.mga4 - 4/core/kwallet-4.12.5-1.mga4 - 4/core/kwordquiz-4.12.5-1.mga4 - 4/core/libbluedevil-2.0-0.git20140107.1.1.mga4 - 4/core/libkcddb-4.12.5-1.mga4 - 4/core/libkcompactdisc-4.12.5-1.mga4 - 4/core/libkdcraw-4.12.5-1.mga4 - 4/core/libkdeedu-4.12.5-1.mga4 - 4/core/libkdegames-4.12.5-1.mga4 - 4/core/libkexiv2-4.12.5-1.mga4 - 4/core/libkipi-4.12.5-1.mga4 - 4/core/libkmahjongg-4.12.5-1.mga4 - 4/core/libkomparediff2-4.12.5-1.mga4 - 4/core/libksane-4.12.5-1.mga4 - 4/core/lokalize-4.12.5-1.mga4 - 4/core/lskat-4.12.5-1.mga4 - 4/core/mageia-kde4-config-4-0.20140914.1.mga4 - 4/core/marble-4.12.5-1.mga4 - 4/core/mplayerthumbs-4.12.5-1.mga4 - 4/core/nepomuk-core-4.12.5-1.mga4 - 4/core/nepomuk-widgets-4.12.5-1.mga4 - 4/core/okteta-4.12.5-1.mga4 - 4/core/okular-4.12.5-1.mga4 - 4/core/oxygen-icon-theme-4.12.5-1.mga4 - 4/core/pairs-4.12.5-1.mga4 - 4/core/palapeli-4.12.5-1.mga4 - 4/core/parley-4.12.5-1.mga4 - 4/core/perl-kde4-4.12.5-1.mga4 - 4/core/perl-qt4-4.12.5-1.mga4 - 4/core/picmi-4.12.5-1.1.mga4 - 4/core/polkit-qt-1-0.112.0-1.mga4 - 4/core/poxml-4.12.5-1.mga4 - 4/core/print-manager-4.12.5-1.mga4 - 4/core/python-kde4-4.12.5-1.mga4 - 4/core/qyoto-4.12.5-1.mga4 - 4/core/rocs-4.12.5-1.mga4 - 4/core/ruby-qt4-4.12.5-1.mga4 - 4/core/smokegen-4.12.5-1.mga4 - 4/core/smokekde-4.12.5-1.mga4 - 4/core/smokeqt-4.12.5-1.mga4 - 4/core/step-4.12.5-1.mga4 - 4/core/superkaramba-4.12.5-1.mga4 - 4/core/svgpart-4.12.5-1.mga4 - 4/core/sweeper-4.12.5-1.mga4 - 4/core/task-kde4-4.12.5-1.mga4 - 4/core/umbrello-4.12.5-1.mga4