An input validation failure was discovered in KSSL (CVE-2011-3365) and Rekonq (CVE-2011-3366) in KDE SC 4.6.0 up to and including KDE SC 4.7.1, however upstream indicates that ealier versions of KDE SC may also be affected. The upstream advisory [1] details those flaws. An independent report [2] also notes that Arora and Psi are affected as well. This bug is for Arora (CVE-2011-3367). [1] http://www.kde.org/info/security/advisory-20111003-1.txt [2] http://archives.neohapsis.com/archives/fulldisclosure/2011-10/att-0353/NDSA20111003.txt.asc
Created arora tracking bugs for this issue Affects: fedora-all [bug 746878]
arora-0.11.0-3.fc16 has been pushed to the Fedora 16 stable repository. If problems still persist, please make note of it in this bug report.
arora-0.11.0-3.fc15 has been pushed to the Fedora 15 stable repository. If problems still persist, please make note of it in this bug report.
ARRAY(0x55ab80fa9758)