Red Hat Security AdvisoryRHSA-2011:0464
kdelibs security update
Released 2011-04-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kdelibs-6:4.3.4-11.el6_0.2, kdelibs-common-6:4.3.4-11.el6_0.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) kdelibs-6:4.3.4-11.el6_0.2, kdelibs-apidocs-6:4.3.4-11.el6_0.2, kdelibs-devel-6:4.3.4-11.el6_0.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) kdelibs-6:4.3.4-11.el6_0.2, kdelibs-apidocs-6:4.3.4-11.el6_0.2, kdelibs-common-6:4.3.4-11.el6_0.2 +1
- Red Hat Enterprise Linux Server (v. 6) kdelibs-6:4.3.4-11.el6_0.2, kdelibs-6:4.3.4-11.el6_0.2.ppc, kdelibs-apidocs-6:4.3.4-11.el6_0.2 +3
- Red Hat Enterprise Linux Workstation (v. 6) kdelibs-6:4.3.4-11.el6_0.2, kdelibs-apidocs-6:4.3.4-11.el6_0.2, kdelibs-common-6:4.3.4-11.el6_0.2 +1
Fixes 2 records
Priority LOW 25
Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02673 · Published 2011-04-18 · Fixed CWE-79
Priority LOW 22
kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to s…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00999 · Published 2011-03-16 · Fixed CWE-20
