|
|
>> Fedora Security Update Fixes kdebase URL Spoofing and Security Bypass
|
Multiple vulnerabilities have been identified in Fedora, which could be exploited by malicious web sites to conduct spoofing or phishing attacks, or by malicious users to bypass security restrictions. These issues are caused by errors in kdebase. For additional information, see : VUPEN/ADV-2007-2538 - VUPEN/ADV-2007-2807 - VUPEN/ADV-2007-3227
Affected Products
Fedora Core 6
Solution
Upgrade the affected packages :
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
92d47cced043d1ca11ae2cd3f77de565cfc37466 SRPMS/kdebase-3.5.7-1.fc6.src.rpm
92d47cced043d1ca11ae2cd3f77de565cfc37466 noarch/kdebase-3.5.7-1.fc6.src.rpm
6c6ef2112c714725adb2bfa7561d778bc76914dc ppc/kdebase-3.5.7-1.fc6.ppc.rpm
17597bc0aa22d290c8fc061319b167e12218cd92 ppc/kdebase-devel-3.5.7-1.fc6.ppc.rpm
45cc366f9691c32af6aa21df409c0dbd65515b3a ppc/debug/kdebase-debuginfo-3.5.7-1.fc6.ppc.rpm
c01481035e2e06fd44e6d3aee81fb7dfcd93e30b x86_64/debug/kdebase-debuginfo-3.5.7-1.fc6.x86_64.rpm
879b9625a1d7cb605ad454e9df57bddc3f9beb86 x86_64/kdebase-devel-3.5.7-1.fc6.x86_64.rpm
602f5e440ae35a8ee662dc97d7353c19ccb268b3 x86_64/kdebase-3.5.7-1.fc6.x86_64.rpm
ffc98459e8d299a146f10dfb0367bb5523538587 i386/kdebase-3.5.7-1.fc6.i386.rpm
da730538464d5085fb9fd821885f4d3b4137f76b i386/debug/kdebase-debuginfo-3.5.7-1.fc6.i386.rpm
9b786c165ce884d2c94054acd42f37ee69b92cf7 i386/kdebase-devel-3.5.7-1.fc6.i386.rpm
References
http://www.vupen.com/english/advisories/2007/3398
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00084.html
ChangeLog
2007-10-09 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
