Red Hat Security Advisory

RHSA-2009:1127

kdelibs security update

Released 2009-06-25 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) kdelibs-6:3.5.4-22.el5_3, kdelibs-6:3.5.4-22.el5_3.i386, kdelibs-6:3.5.4-22.el5_3.ia64 +9
Red Hat Enterprise Linux AS version 4 kdelibs-6:3.3.1-14.el4, kdelibs-6:3.3.1-14.el4.i386, kdelibs-6:3.3.1-14.el4.ia64 +5
Red Hat Enterprise Linux Desktop (v. 5 client) kdelibs-6:3.5.4-22.el5_3, kdelibs-6:3.5.4-22.el5_3.i386, kdelibs-apidocs-6:3.5.4-22.el5_3 +1
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) kdelibs-6:3.5.4-22.el5_3, kdelibs-devel-6:3.5.4-22.el5_3, kdelibs-devel-6:3.5.4-22.el5_3.i386
Red Hat Enterprise Linux Desktop version 4 kdelibs-6:3.3.1-14.el4, kdelibs-6:3.3.1-14.el4.i386, kdelibs-devel-6:3.3.1-14.el4 +1
Red Hat Enterprise Linux ES version 4 kdelibs-6:3.3.1-14.el4, kdelibs-6:3.3.1-14.el4.i386, kdelibs-6:3.3.1-14.el4.ia64 +3
Red Hat Enterprise Linux WS version 4 kdelibs-6:3.3.1-14.el4, kdelibs-6:3.3.1-14.el4.i386, kdelibs-6:3.3.1-14.el4.ia64 +3

Fixes 3 records

TI-2009-01613 CVE-2009-1698 · GHSA-g539-5hv9-9m5x

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod…

MEDIUM 51

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a lar…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08462 Published 2009-06-10 Fixed CWE-94

TI-2009-01602 CVE-2009-1687 · GHSA-ph64-wm3p-cq9q

The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0…

MEDIUM 51

The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attacke…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08111 Published 2009-06-10 Fixed CWE-399

TI-2009-01605 CVE-2009-1690 · GHSA-2fpc-5vfr-7xv5

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0…

MEDIUM 50

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote at…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06618 Published 2009-06-10 Fixed CWE-399