Bug 175260
| Summary: | koffice, kpdf multiple vulnerabilities (CAN-2005-3191, CAN-2005-3192, CAN-2005-3193) | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Ville Skyttä <scop> | ||||
| Component: | koffice | Assignee: | Andreas Bierfert <andreas.bierfert> | ||||
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||
| Severity: | medium | Docs Contact: | |||||
| Priority: | high | ||||||
| Version: | 4 | CC: | extras-qa, rdieter, than | ||||
| Target Milestone: | --- | Keywords: | Security | ||||
| Target Release: | --- | ||||||
| Hardware: | All | ||||||
| OS: | Linux | ||||||
| URL: | http://www.kde.org/info/security/advisory-20051207-1.txt | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | 1.4.2-2 | Doc Type: | Bug Fix | ||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2006-01-03 08:38:52 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
|
Description
Ville Skyttä
2005-12-08 10:39:33 UTC
Build for fc4 FYI, advisory was re-issued with new patches: http://www.kde.org/info/security/advisory-20051207-2.txt Please include the (full) URL to the advisory.txt, patch, as well as patch's .asc signature in the specfile/srpm as well. Nevermind, looks like that -2.txt doesn't exist yet, but has been distributed to kde packagers only (atm), but the patches are new(er). Created attachment 122450 [details]
updated advisory
marking private to Fedora Project Contributors (for now). [05:33 PM][awjb@alkaid ~/cvs/fedora/extras/rpms/koffice]$ diff post-1.3-koffice-CAN-2005-3193.diff FC-4/koffice-CAN-2005-3193.diff [05:34 PM][awjb@alkaid ~/cvs/fedora/extras/rpms/koffice]$ seems like the patch is the same that is in the tree for FC-4 and devel (both have been build an published...) Rex could you comment on this? Either this is already fixed or I need more info... Simply verify that you have the latest version of the patch (since it had been updated since original publication). Verified. Closing. |