Synopsis

kdelibs security update

Type/Severity

Security Advisory: Critical

Topic

Updated kdelibs packages that correct an integer overflow flaw are now
available.

This update has been rated as having critical security impact by the Red
Hat Security Response Team.

Description

The kdelibs package provides libraries for the K Desktop Environment (KDE).
Qt is a GUI software toolkit for the X Window System.

An integer overflow flaw was found in the way Qt handled pixmap images.
The KDE khtml library uses Qt in such a way that untrusted parameters could
be passed to Qt, triggering the overflow. An attacker could for example
create a malicious web page that when viewed by a victim in the Konqueror
browser would cause Konqueror to crash or possibly execute arbitrary code
with the privileges of the victim. (CVE-2006-4811)

Users of KDE should upgrade to these updated packages, which contain a
backported patch to correct this issue.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Server 3 x86_64
• Red Hat Enterprise Linux Server 3 ia64
• Red Hat Enterprise Linux Server 3 i386
• Red Hat Enterprise Linux Server 2 ia64
• Red Hat Enterprise Linux Server 2 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Workstation 3 x86_64
• Red Hat Enterprise Linux Workstation 3 ia64
• Red Hat Enterprise Linux Workstation 3 i386
• Red Hat Enterprise Linux Workstation 2 ia64
• Red Hat Enterprise Linux Workstation 2 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux Desktop 3 x86_64
• Red Hat Enterprise Linux Desktop 3 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for IBM z Systems 3 s390x
• Red Hat Enterprise Linux for IBM z Systems 3 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc
• Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

• BZ - 210742 - CVE-2006-4811 qt integer overflow

CVEs

• CVE-2006-4811

References

• http://www.redhat.com/security/updates/classification/#critical

Red Hat Enterprise Linux Server 4

SRPM
x86_64
kdelibs-3.3.1-6.RHEL4.i386.rpm	SHA-256: d0346d6c6b6c61afa3f7e556a59ca95db3412fe3f941c8f9795fa4ea0cb5735e
kdelibs-3.3.1-6.RHEL4.i386.rpm	SHA-256: d0346d6c6b6c61afa3f7e556a59ca95db3412fe3f941c8f9795fa4ea0cb5735e
kdelibs-3.3.1-6.RHEL4.x86_64.rpm	SHA-256: 738845e7233f1b8db9d77043cf4d2f8e55e754a7e803898682b9c23d9e8c2a73
kdelibs-3.3.1-6.RHEL4.x86_64.rpm	SHA-256: 738845e7233f1b8db9d77043cf4d2f8e55e754a7e803898682b9c23d9e8c2a73
kdelibs-devel-3.3.1-6.RHEL4.x86_64.rpm	SHA-256: 4f994616b40dc61972a95afec902280aa64255249d70f55b309e3f5b51e39a05
kdelibs-devel-3.3.1-6.RHEL4.x86_64.rpm	SHA-256: 4f994616b40dc61972a95afec902280aa64255249d70f55b309e3f5b51e39a05
ia64
kdelibs-3.3.1-6.RHEL4.i386.rpm	SHA-256: d0346d6c6b6c61afa3f7e556a59ca95db3412fe3f941c8f9795fa4ea0cb5735e
kdelibs-3.3.1-6.RHEL4.i386.rpm	SHA-256: d0346d6c6b6c61afa3f7e556a59ca95db3412fe3f941c8f9795fa4ea0cb5735e
kdelibs-3.3.1-6.RHEL4.ia64.rpm	SHA-256: 5e419e0276412d18134f04af09dba3ac17291f22dd0b43e86acef3f617dcf7e2
kdelibs-3.3.1-6.RHEL4.ia64.rpm	SHA-256: 5e419e0276412d18134f04af09dba3ac17291f22dd0b43e86acef3f617dcf7e2
kdelibs-devel-3.3.1-6.RHEL4.ia64.rpm	SHA-256: 06feb31ce8611a9b4c4d75ae8776c5833e2aef68bb664827458f544bbb82be9d
kdelibs-devel-3.3.1-6.RHEL4.ia64.rpm	SHA-256: 06feb31ce8611a9b4c4d75ae8776c5833e2aef68bb664827458f544bbb82be9d
i386
kdelibs-3.3.1-6.RHEL4.i386.rpm	SHA-256: d0346d6c6b6c61afa3f7e556a59ca95db3412fe3f941c8f9795fa4ea0cb5735e
kdelibs-3.3.1-6.RHEL4.i386.rpm	SHA-256: d0346d6c6b6c61afa3f7e556a59ca95db3412fe3f941c8f9795fa4ea0cb5735e
kdelibs-devel-3.3.1-6.RHEL4.i386.rpm	SHA-256: 8e5f498fbbabc54c2f1227c627ff0d11af12d24649af48399efd4d16ddd08760
kdelibs-devel-3.3.1-6.RHEL4.i386.rpm	SHA-256: 8e5f498fbbabc54c2f1227c627ff0d11af12d24649af48399efd4d16ddd08760

Red Hat Enterprise Linux Workstation 4

SRPM
x86_64
kdelibs-3.3.1-6.RHEL4.i386.rpm	SHA-256: d0346d6c6b6c61afa3f7e556a59ca95db3412fe3f941c8f9795fa4ea0cb5735e
kdelibs-3.3.1-6.RHEL4.x86_64.rpm	SHA-256: 738845e7233f1b8db9d77043cf4d2f8e55e754a7e803898682b9c23d9e8c2a73
kdelibs-devel-3.3.1-6.RHEL4.x86_64.rpm	SHA-256: 4f994616b40dc61972a95afec902280aa64255249d70f55b309e3f5b51e39a05
ia64
kdelibs-3.3.1-6.RHEL4.i386.rpm	SHA-256: d0346d6c6b6c61afa3f7e556a59ca95db3412fe3f941c8f9795fa4ea0cb5735e
kdelibs-3.3.1-6.RHEL4.ia64.rpm	SHA-256: 5e419e0276412d18134f04af09dba3ac17291f22dd0b43e86acef3f617dcf7e2
kdelibs-devel-3.3.1-6.RHEL4.ia64.rpm	SHA-256: 06feb31ce8611a9b4c4d75ae8776c5833e2aef68bb664827458f544bbb82be9d
i386
kdelibs-3.3.1-6.RHEL4.i386.rpm	SHA-256: d0346d6c6b6c61afa3f7e556a59ca95db3412fe3f941c8f9795fa4ea0cb5735e
kdelibs-devel-3.3.1-6.RHEL4.i386.rpm	SHA-256: 8e5f498fbbabc54c2f1227c627ff0d11af12d24649af48399efd4d16ddd08760

Red Hat Enterprise Linux Desktop 4

SRPM
x86_64
kdelibs-3.3.1-6.RHEL4.i386.rpm	SHA-256: d0346d6c6b6c61afa3f7e556a59ca95db3412fe3f941c8f9795fa4ea0cb5735e
kdelibs-3.3.1-6.RHEL4.x86_64.rpm	SHA-256: 738845e7233f1b8db9d77043cf4d2f8e55e754a7e803898682b9c23d9e8c2a73
kdelibs-devel-3.3.1-6.RHEL4.x86_64.rpm	SHA-256: 4f994616b40dc61972a95afec902280aa64255249d70f55b309e3f5b51e39a05
i386
kdelibs-3.3.1-6.RHEL4.i386.rpm	SHA-256: d0346d6c6b6c61afa3f7e556a59ca95db3412fe3f941c8f9795fa4ea0cb5735e
kdelibs-devel-3.3.1-6.RHEL4.i386.rpm	SHA-256: 8e5f498fbbabc54c2f1227c627ff0d11af12d24649af48399efd4d16ddd08760

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390x
kdelibs-3.3.1-6.RHEL4.s390.rpm	SHA-256: 1ca3c6dd824162a8e8cab9fb89c5812e98aebbb153fae4841b6b19b8aac7fd00
kdelibs-3.3.1-6.RHEL4.s390x.rpm	SHA-256: 3e39c6d2b108dfd18f65a128bcf10505879ef4ae4482275230a5310800563959
kdelibs-devel-3.3.1-6.RHEL4.s390x.rpm	SHA-256: fae1d78c0dcfc1bc535efe2269f2c00248dfad6a4d5beacba4816d70b7c2992d
s390
kdelibs-3.3.1-6.RHEL4.s390.rpm	SHA-256: 1ca3c6dd824162a8e8cab9fb89c5812e98aebbb153fae4841b6b19b8aac7fd00
kdelibs-devel-3.3.1-6.RHEL4.s390.rpm	SHA-256: a27ec8746db7620038371adf12686bee9060a138597f130ee96fce541747db23

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ppc
kdelibs-3.3.1-6.RHEL4.ppc.rpm	SHA-256: f5720b3d0f88adcb2f2f55aecf02f708cd3b815d85ddef4ee3a9fe125769eb41
kdelibs-3.3.1-6.RHEL4.ppc64.rpm	SHA-256: ed2a70c9b900fd734c421d5a2a4a4de217b5a6472756c27a0ef6e6c65d187204
kdelibs-devel-3.3.1-6.RHEL4.ppc.rpm	SHA-256: 43a896da6d34e630a472e41d99de56a52753351ec31ebe2dd083d22ae1f8a3e1