Synopsis

Moderate: kdelibs security update

Type/Severity

Security Advisory: Moderate

Topic

Updated kdelibs packages that fix two security issues are now available for
Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.

Description

The kdelibs packages provide libraries for the K Desktop Environment (KDE).

A cross-site scripting (XSS) flaw was found in the way KHTML, the HTML
layout engine used by KDE applications such as the Konqueror web browser,
displayed certain error pages. A remote attacker could use this flaw to
perform a cross-site scripting attack against victims by tricking them into
visiting a specially-crafted URL. (CVE-2011-1168)

A flaw was found in the way kdelibs checked the user specified hostname
against the name in the server's SSL certificate. A man-in-the-middle
attacker could use this flaw to trick an application using kdelibs into
mistakenly accepting a certificate as if it was valid for the host, if that
certificate was issued for an IP address to which the user specified
hostname was resolved to. (CVE-2011-1094)

Note: As part of the fix for CVE-2011-1094, this update also introduces
stricter handling for wildcards used in servers' SSL certificates.

Users should upgrade to these updated packages, which contain backported
patches to correct these issues. The desktop must be restarted (log out,
then log back in) for this update to take effect.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386

Fixes

• BZ - 632114 - CVE-2011-1094 kdelibs: SSL certificate for IP address accepted as valid for hosts that resolve to the IP
• BZ - 695398 - CVE-2011-1168 kdelibs: partially universal XSS in Konqueror error pages

CVEs

• CVE-2011-1168
• CVE-2011-1094

References

• https://access.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux Server 6

SRPM
kdelibs-4.3.4-11.el6_0.2.src.rpm	SHA-256: 263144e83b793795a66745b82116e14418cb7a08b090c540773c5a54beb4b960
x86_64
kdelibs-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4000e590f67c5c11fceeff5ff37a97e4dc6f7d715fcd5506cdc6dae703f8dcf1
kdelibs-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: 80b2ae81944587b2ad9a919d41470319550312a0e77103304a152b108d341399
kdelibs-apidocs-4.3.4-11.el6_0.2.noarch.rpm	SHA-256: 7a9d784ac3bf3439cfbd53d03cf11901ea2d3127a913acfa8a7957aef856052a
kdelibs-common-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: c19c30cc42f400a41d32af89593aa7be68416b2c952b0222233463688d171eca
kdelibs-debuginfo-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4c066eb9dd627bc1515f020c4aa2349df61dabdd4023c0860115fcfd39aed1a3
kdelibs-debuginfo-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: 709d98aecf2b7d8664b49a6f83e065a8dc86516f52e086ff3b5d52546089df05
kdelibs-devel-4.3.4-11.el6_0.2.i686.rpm	SHA-256: b4a75440ebc68212f4ecaf5979eee65b6ea0fce9e3c9fc92a2780a06ccc0913a
kdelibs-devel-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: afee3f0334d92d86f957ca0efc96ff353d886c7dbfb2b2042a1a64525d95a79d
i386
kdelibs-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4000e590f67c5c11fceeff5ff37a97e4dc6f7d715fcd5506cdc6dae703f8dcf1
kdelibs-apidocs-4.3.4-11.el6_0.2.noarch.rpm	SHA-256: 7a9d784ac3bf3439cfbd53d03cf11901ea2d3127a913acfa8a7957aef856052a
kdelibs-common-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 9af75c39286d9431e2d0a03295ca4d161182f20a6b04fdca2cc1aed392ae43e4
kdelibs-debuginfo-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4c066eb9dd627bc1515f020c4aa2349df61dabdd4023c0860115fcfd39aed1a3
kdelibs-devel-4.3.4-11.el6_0.2.i686.rpm	SHA-256: b4a75440ebc68212f4ecaf5979eee65b6ea0fce9e3c9fc92a2780a06ccc0913a

Red Hat Enterprise Linux Workstation 6

SRPM
kdelibs-4.3.4-11.el6_0.2.src.rpm	SHA-256: 263144e83b793795a66745b82116e14418cb7a08b090c540773c5a54beb4b960
x86_64
kdelibs-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4000e590f67c5c11fceeff5ff37a97e4dc6f7d715fcd5506cdc6dae703f8dcf1
kdelibs-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: 80b2ae81944587b2ad9a919d41470319550312a0e77103304a152b108d341399
kdelibs-apidocs-4.3.4-11.el6_0.2.noarch.rpm	SHA-256: 7a9d784ac3bf3439cfbd53d03cf11901ea2d3127a913acfa8a7957aef856052a
kdelibs-common-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: c19c30cc42f400a41d32af89593aa7be68416b2c952b0222233463688d171eca
kdelibs-debuginfo-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4c066eb9dd627bc1515f020c4aa2349df61dabdd4023c0860115fcfd39aed1a3
kdelibs-debuginfo-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: 709d98aecf2b7d8664b49a6f83e065a8dc86516f52e086ff3b5d52546089df05
kdelibs-devel-4.3.4-11.el6_0.2.i686.rpm	SHA-256: b4a75440ebc68212f4ecaf5979eee65b6ea0fce9e3c9fc92a2780a06ccc0913a
kdelibs-devel-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: afee3f0334d92d86f957ca0efc96ff353d886c7dbfb2b2042a1a64525d95a79d
i386
kdelibs-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4000e590f67c5c11fceeff5ff37a97e4dc6f7d715fcd5506cdc6dae703f8dcf1
kdelibs-apidocs-4.3.4-11.el6_0.2.noarch.rpm	SHA-256: 7a9d784ac3bf3439cfbd53d03cf11901ea2d3127a913acfa8a7957aef856052a
kdelibs-common-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 9af75c39286d9431e2d0a03295ca4d161182f20a6b04fdca2cc1aed392ae43e4
kdelibs-debuginfo-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4c066eb9dd627bc1515f020c4aa2349df61dabdd4023c0860115fcfd39aed1a3
kdelibs-devel-4.3.4-11.el6_0.2.i686.rpm	SHA-256: b4a75440ebc68212f4ecaf5979eee65b6ea0fce9e3c9fc92a2780a06ccc0913a

Red Hat Enterprise Linux Desktop 6

SRPM
kdelibs-4.3.4-11.el6_0.2.src.rpm	SHA-256: 263144e83b793795a66745b82116e14418cb7a08b090c540773c5a54beb4b960
x86_64
kdelibs-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4000e590f67c5c11fceeff5ff37a97e4dc6f7d715fcd5506cdc6dae703f8dcf1
kdelibs-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: 80b2ae81944587b2ad9a919d41470319550312a0e77103304a152b108d341399
kdelibs-apidocs-4.3.4-11.el6_0.2.noarch.rpm	SHA-256: 7a9d784ac3bf3439cfbd53d03cf11901ea2d3127a913acfa8a7957aef856052a
kdelibs-common-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: c19c30cc42f400a41d32af89593aa7be68416b2c952b0222233463688d171eca
kdelibs-debuginfo-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4c066eb9dd627bc1515f020c4aa2349df61dabdd4023c0860115fcfd39aed1a3
kdelibs-debuginfo-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4c066eb9dd627bc1515f020c4aa2349df61dabdd4023c0860115fcfd39aed1a3
kdelibs-debuginfo-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: 709d98aecf2b7d8664b49a6f83e065a8dc86516f52e086ff3b5d52546089df05
kdelibs-debuginfo-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: 709d98aecf2b7d8664b49a6f83e065a8dc86516f52e086ff3b5d52546089df05
kdelibs-devel-4.3.4-11.el6_0.2.i686.rpm	SHA-256: b4a75440ebc68212f4ecaf5979eee65b6ea0fce9e3c9fc92a2780a06ccc0913a
kdelibs-devel-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: afee3f0334d92d86f957ca0efc96ff353d886c7dbfb2b2042a1a64525d95a79d
i386
kdelibs-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4000e590f67c5c11fceeff5ff37a97e4dc6f7d715fcd5506cdc6dae703f8dcf1
kdelibs-apidocs-4.3.4-11.el6_0.2.noarch.rpm	SHA-256: 7a9d784ac3bf3439cfbd53d03cf11901ea2d3127a913acfa8a7957aef856052a
kdelibs-common-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 9af75c39286d9431e2d0a03295ca4d161182f20a6b04fdca2cc1aed392ae43e4
kdelibs-debuginfo-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4c066eb9dd627bc1515f020c4aa2349df61dabdd4023c0860115fcfd39aed1a3
kdelibs-debuginfo-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4c066eb9dd627bc1515f020c4aa2349df61dabdd4023c0860115fcfd39aed1a3
kdelibs-devel-4.3.4-11.el6_0.2.i686.rpm	SHA-256: b4a75440ebc68212f4ecaf5979eee65b6ea0fce9e3c9fc92a2780a06ccc0913a

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
kdelibs-4.3.4-11.el6_0.2.src.rpm	SHA-256: 263144e83b793795a66745b82116e14418cb7a08b090c540773c5a54beb4b960
s390x
kdelibs-4.3.4-11.el6_0.2.s390.rpm	SHA-256: ff133855eddf262f4e3a44ed53faf0030ff5cfba8840c7c0ec85094762d1b30c
kdelibs-4.3.4-11.el6_0.2.s390x.rpm	SHA-256: 7f91ac13f6a1a8097cd7c0ea1ca95dac0b9cc66af6bfddde9be43829258d780c
kdelibs-apidocs-4.3.4-11.el6_0.2.noarch.rpm	SHA-256: 7a9d784ac3bf3439cfbd53d03cf11901ea2d3127a913acfa8a7957aef856052a
kdelibs-common-4.3.4-11.el6_0.2.s390x.rpm	SHA-256: 8acf1e5fcca57b2cac5eaed747b97e58927b8bd044db06083aeffe2595220af1
kdelibs-debuginfo-4.3.4-11.el6_0.2.s390.rpm	SHA-256: 5343a8e714b6ad39198077fe7eae8186bcf1107f9673dab69461687d0b90f8b8
kdelibs-debuginfo-4.3.4-11.el6_0.2.s390x.rpm	SHA-256: 5b446c2934a6ba0d8b612c2c457a5d25f3b857acb9b817401f4f283f4f234843
kdelibs-devel-4.3.4-11.el6_0.2.s390.rpm	SHA-256: b61d84a8c90c6e6c04136ed2e04a4cdaa111a67b11c8f621bd48bd236b34dc50
kdelibs-devel-4.3.4-11.el6_0.2.s390x.rpm	SHA-256: 32eba68947697c8f8db2009112c2ba9fcce27ad0270c3bf13cad02ae69d28dc4

Red Hat Enterprise Linux for Power, big endian 6

SRPM
kdelibs-4.3.4-11.el6_0.2.src.rpm	SHA-256: 263144e83b793795a66745b82116e14418cb7a08b090c540773c5a54beb4b960
ppc64
kdelibs-4.3.4-11.el6_0.2.ppc.rpm	SHA-256: 4f0534f7963c419faa32d4ba09f99c5fcecb0568b4f7d855e033af64ffa05a72
kdelibs-4.3.4-11.el6_0.2.ppc64.rpm	SHA-256: 5ae15c062fc3a25fa9fc9dc6f8ccf7d93f66ac7a57ff45d54819c7951c6f38ee
kdelibs-apidocs-4.3.4-11.el6_0.2.noarch.rpm	SHA-256: 7a9d784ac3bf3439cfbd53d03cf11901ea2d3127a913acfa8a7957aef856052a
kdelibs-common-4.3.4-11.el6_0.2.ppc64.rpm	SHA-256: 3ab97a8a3c1c297da6d9bf826a040d3feb1d462641582b6476207824a535f515
kdelibs-debuginfo-4.3.4-11.el6_0.2.ppc.rpm	SHA-256: cd2ba68a633f3c0d15b84894384a37cbf9076263427b76393ef7c92ddf0a2c4a
kdelibs-debuginfo-4.3.4-11.el6_0.2.ppc64.rpm	SHA-256: 180d7d7d9617a52a712cd2715489ebafdc5f5446b01438606f78294408123a0c
kdelibs-devel-4.3.4-11.el6_0.2.ppc.rpm	SHA-256: f1e70ee6591806da4ef679504ab4c909eed25af8b5432013936277ad9ed5666d
kdelibs-devel-4.3.4-11.el6_0.2.ppc64.rpm	SHA-256: 64081bbee5c0443f5031879d20764d805a159a4fb94b4071fa5312533aa2fea5

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
kdelibs-4.3.4-11.el6_0.2.src.rpm	SHA-256: 263144e83b793795a66745b82116e14418cb7a08b090c540773c5a54beb4b960
x86_64
kdelibs-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4000e590f67c5c11fceeff5ff37a97e4dc6f7d715fcd5506cdc6dae703f8dcf1
kdelibs-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: 80b2ae81944587b2ad9a919d41470319550312a0e77103304a152b108d341399
kdelibs-apidocs-4.3.4-11.el6_0.2.noarch.rpm	SHA-256: 7a9d784ac3bf3439cfbd53d03cf11901ea2d3127a913acfa8a7957aef856052a
kdelibs-common-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: c19c30cc42f400a41d32af89593aa7be68416b2c952b0222233463688d171eca
kdelibs-debuginfo-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4c066eb9dd627bc1515f020c4aa2349df61dabdd4023c0860115fcfd39aed1a3
kdelibs-debuginfo-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: 709d98aecf2b7d8664b49a6f83e065a8dc86516f52e086ff3b5d52546089df05
kdelibs-devel-4.3.4-11.el6_0.2.i686.rpm	SHA-256: b4a75440ebc68212f4ecaf5979eee65b6ea0fce9e3c9fc92a2780a06ccc0913a
kdelibs-devel-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: afee3f0334d92d86f957ca0efc96ff353d886c7dbfb2b2042a1a64525d95a79d

Red Hat Enterprise Linux Server from RHUI 6

SRPM
kdelibs-4.3.4-11.el6_0.2.src.rpm	SHA-256: 263144e83b793795a66745b82116e14418cb7a08b090c540773c5a54beb4b960
x86_64
kdelibs-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4000e590f67c5c11fceeff5ff37a97e4dc6f7d715fcd5506cdc6dae703f8dcf1
kdelibs-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: 80b2ae81944587b2ad9a919d41470319550312a0e77103304a152b108d341399
kdelibs-apidocs-4.3.4-11.el6_0.2.noarch.rpm	SHA-256: 7a9d784ac3bf3439cfbd53d03cf11901ea2d3127a913acfa8a7957aef856052a
kdelibs-common-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: c19c30cc42f400a41d32af89593aa7be68416b2c952b0222233463688d171eca
kdelibs-debuginfo-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4c066eb9dd627bc1515f020c4aa2349df61dabdd4023c0860115fcfd39aed1a3
kdelibs-debuginfo-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: 709d98aecf2b7d8664b49a6f83e065a8dc86516f52e086ff3b5d52546089df05
kdelibs-devel-4.3.4-11.el6_0.2.i686.rpm	SHA-256: b4a75440ebc68212f4ecaf5979eee65b6ea0fce9e3c9fc92a2780a06ccc0913a
kdelibs-devel-4.3.4-11.el6_0.2.x86_64.rpm	SHA-256: afee3f0334d92d86f957ca0efc96ff353d886c7dbfb2b2042a1a64525d95a79d
i386
kdelibs-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4000e590f67c5c11fceeff5ff37a97e4dc6f7d715fcd5506cdc6dae703f8dcf1
kdelibs-apidocs-4.3.4-11.el6_0.2.noarch.rpm	SHA-256: 7a9d784ac3bf3439cfbd53d03cf11901ea2d3127a913acfa8a7957aef856052a
kdelibs-common-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 9af75c39286d9431e2d0a03295ca4d161182f20a6b04fdca2cc1aed392ae43e4
kdelibs-debuginfo-4.3.4-11.el6_0.2.i686.rpm	SHA-256: 4c066eb9dd627bc1515f020c4aa2349df61dabdd4023c0860115fcfd39aed1a3
kdelibs-devel-4.3.4-11.el6_0.2.i686.rpm	SHA-256: b4a75440ebc68212f4ecaf5979eee65b6ea0fce9e3c9fc92a2780a06ccc0913a