Synopsis

kdelibs security update

Type/Severity

Security Advisory: Moderate

Topic

Updated kdelibs packages are now available for Red Hat Enterprise Linux 4.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

kdelibs contains libraries for the K Desktop Environment.

A flaw was discovered affecting Kate, the KDE advanced text editor, and
Kwrite. Depending on system settings, it may be possible for a local user
to read the backup files created by Kate or Kwrite. The Common
Vulnerabilities and Exposures project assigned the name CAN-2005-1920 to
this issue.

Please note this issue does not affect Red Hat Enterprise Linux 3 or 2.1.

Users of Kate or Kwrite should update to these errata packages which
contains a backported patch from the KDE security team correcting this issue.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 163130 - CAN-2005-1920 Kate backup file permissions leak

CVEs

• CVE-2005-1920

References

• http://www.kde.org/info/security/advisory-20050718-1.txt

Red Hat Enterprise Linux Server 4

SRPM
kdelibs-3.3.1-3.11.src.rpm	SHA-256: 5ecfcd26d25c5d3392fca1593756545df603751a248eb72381b41c734aca6476
x86_64
kdelibs-3.3.1-3.11.i386.rpm	SHA-256: c31af6336f51f4c5329b6acea6c3509e6b85322fd29d53393faf6f55f61bc124
kdelibs-3.3.1-3.11.i386.rpm	SHA-256: c31af6336f51f4c5329b6acea6c3509e6b85322fd29d53393faf6f55f61bc124
kdelibs-3.3.1-3.11.x86_64.rpm	SHA-256: 062b1fa47d757d1540773af2de28535d62c8365008d705007843323a93c63c9d
kdelibs-3.3.1-3.11.x86_64.rpm	SHA-256: 062b1fa47d757d1540773af2de28535d62c8365008d705007843323a93c63c9d
kdelibs-devel-3.3.1-3.11.x86_64.rpm	SHA-256: faf3b507d65034fa40ea0f2bac0270cc80ee811b605fa8bf2ef816c6eebb005d
kdelibs-devel-3.3.1-3.11.x86_64.rpm	SHA-256: faf3b507d65034fa40ea0f2bac0270cc80ee811b605fa8bf2ef816c6eebb005d
ia64
kdelibs-3.3.1-3.11.i386.rpm	SHA-256: c31af6336f51f4c5329b6acea6c3509e6b85322fd29d53393faf6f55f61bc124
kdelibs-3.3.1-3.11.i386.rpm	SHA-256: c31af6336f51f4c5329b6acea6c3509e6b85322fd29d53393faf6f55f61bc124
kdelibs-3.3.1-3.11.ia64.rpm	SHA-256: 16cb2733b402386a9a0e3f31611851a68e36f198ef7089881f1ea8b20965130f
kdelibs-3.3.1-3.11.ia64.rpm	SHA-256: 16cb2733b402386a9a0e3f31611851a68e36f198ef7089881f1ea8b20965130f
kdelibs-devel-3.3.1-3.11.ia64.rpm	SHA-256: a4c2628011a10717d026dd6c84242099869fc83d48f252d52c39c3876116f716
kdelibs-devel-3.3.1-3.11.ia64.rpm	SHA-256: a4c2628011a10717d026dd6c84242099869fc83d48f252d52c39c3876116f716
i386
kdelibs-3.3.1-3.11.i386.rpm	SHA-256: c31af6336f51f4c5329b6acea6c3509e6b85322fd29d53393faf6f55f61bc124
kdelibs-3.3.1-3.11.i386.rpm	SHA-256: c31af6336f51f4c5329b6acea6c3509e6b85322fd29d53393faf6f55f61bc124
kdelibs-devel-3.3.1-3.11.i386.rpm	SHA-256: ad2415d800c9ee9a0c3d31df18e57ff7126d1c047ffeb211aa7938e30a819da6
kdelibs-devel-3.3.1-3.11.i386.rpm	SHA-256: ad2415d800c9ee9a0c3d31df18e57ff7126d1c047ffeb211aa7938e30a819da6

Red Hat Enterprise Linux Workstation 4

SRPM
kdelibs-3.3.1-3.11.src.rpm	SHA-256: 5ecfcd26d25c5d3392fca1593756545df603751a248eb72381b41c734aca6476
x86_64
kdelibs-3.3.1-3.11.i386.rpm	SHA-256: c31af6336f51f4c5329b6acea6c3509e6b85322fd29d53393faf6f55f61bc124
kdelibs-3.3.1-3.11.x86_64.rpm	SHA-256: 062b1fa47d757d1540773af2de28535d62c8365008d705007843323a93c63c9d
kdelibs-devel-3.3.1-3.11.x86_64.rpm	SHA-256: faf3b507d65034fa40ea0f2bac0270cc80ee811b605fa8bf2ef816c6eebb005d
ia64
kdelibs-3.3.1-3.11.i386.rpm	SHA-256: c31af6336f51f4c5329b6acea6c3509e6b85322fd29d53393faf6f55f61bc124
kdelibs-3.3.1-3.11.ia64.rpm	SHA-256: 16cb2733b402386a9a0e3f31611851a68e36f198ef7089881f1ea8b20965130f
kdelibs-devel-3.3.1-3.11.ia64.rpm	SHA-256: a4c2628011a10717d026dd6c84242099869fc83d48f252d52c39c3876116f716
i386
kdelibs-3.3.1-3.11.i386.rpm	SHA-256: c31af6336f51f4c5329b6acea6c3509e6b85322fd29d53393faf6f55f61bc124
kdelibs-devel-3.3.1-3.11.i386.rpm	SHA-256: ad2415d800c9ee9a0c3d31df18e57ff7126d1c047ffeb211aa7938e30a819da6

Red Hat Enterprise Linux Desktop 4

SRPM
kdelibs-3.3.1-3.11.src.rpm	SHA-256: 5ecfcd26d25c5d3392fca1593756545df603751a248eb72381b41c734aca6476
x86_64
kdelibs-3.3.1-3.11.i386.rpm	SHA-256: c31af6336f51f4c5329b6acea6c3509e6b85322fd29d53393faf6f55f61bc124
kdelibs-3.3.1-3.11.x86_64.rpm	SHA-256: 062b1fa47d757d1540773af2de28535d62c8365008d705007843323a93c63c9d
kdelibs-devel-3.3.1-3.11.x86_64.rpm	SHA-256: faf3b507d65034fa40ea0f2bac0270cc80ee811b605fa8bf2ef816c6eebb005d
i386
kdelibs-3.3.1-3.11.i386.rpm	SHA-256: c31af6336f51f4c5329b6acea6c3509e6b85322fd29d53393faf6f55f61bc124
kdelibs-devel-3.3.1-3.11.i386.rpm	SHA-256: ad2415d800c9ee9a0c3d31df18e57ff7126d1c047ffeb211aa7938e30a819da6

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
kdelibs-3.3.1-3.11.src.rpm	SHA-256: 5ecfcd26d25c5d3392fca1593756545df603751a248eb72381b41c734aca6476
s390x
kdelibs-3.3.1-3.11.s390.rpm	SHA-256: 25af9df8570d07df5edc130e51c740071006340938461b1903904b66138df4ef
kdelibs-3.3.1-3.11.s390x.rpm	SHA-256: 84685a61a24f8976c74b412d67efdad3e89387ca509b69e4ddfb0b424538cc2e
kdelibs-devel-3.3.1-3.11.s390x.rpm	SHA-256: 4b69ae226f5127539851e2a36c510035c859e8768cc5de8c157078d1ff49e3e8
s390
kdelibs-3.3.1-3.11.s390.rpm	SHA-256: 25af9df8570d07df5edc130e51c740071006340938461b1903904b66138df4ef
kdelibs-devel-3.3.1-3.11.s390.rpm	SHA-256: 8e500d0e3b3ba9b3fa208404acd59514f93f318e838c8eff73162e87f232435e

Red Hat Enterprise Linux for Power, big endian 4

SRPM
kdelibs-3.3.1-3.11.src.rpm	SHA-256: 5ecfcd26d25c5d3392fca1593756545df603751a248eb72381b41c734aca6476
ppc
kdelibs-3.3.1-3.11.ppc.rpm	SHA-256: d0c06b1b6c34e39979e182859c26fcff11300204acb7f95ca9fc59999d42e0e5
kdelibs-3.3.1-3.11.ppc64.rpm	SHA-256: d930aba02ed515cbf217868e8568bed1c3df0aa41779b9848568a1ad72ec2c0d
kdelibs-devel-3.3.1-3.11.ppc.rpm	SHA-256: 38a6beaf763ae62f9368af24cd2bc4c0a861eced28a6306b5e400ac1badf08a4