[ubuntu/karmic-security] kdenetwork_4.3.2-0ubuntu4.1_i386_translations.tar.gz, kdenetwork_4.3.2-0ubuntu4.1_powerpc_translations.tar.gz, kdenetwork_4.3.2-0ubuntu4.1_amd64_translations.tar.gz, kdenetwork_4.3.2-0ubuntu4.1_sparc_translations.tar.gz (delayed), kdenetwork_4.3.2-0ubuntu4.1_armel_translations.tar.gz, kdenetwork_4.3.2-0ubuntu4.1_ia64_translations.tar.gz, kdenetwork, kdenetwork_4.3.2-0ubuntu4.1_lpia_translations.tar.gz 4:4.3.2-0ubuntu4.1 (Accepted)

[Ubuntu Installer]

kdenetwork (4:4.3.2-0ubuntu4.1) karmic-security; urgency=low

  * SECURITY UPDATE: file name directory traversal attack (LP: #578856).
   - Add debian/patches/kubuntu_01_kget_CVE-2010-1000.diff
   - kget/ui/metalinkcreator/metalinker.cpp check filename is valid
   - CVE-2010-1000, SA39528

Date: Wed, 12 May 2010 10:19:09 +0100
Changed-By: Jonathan Riddell <jriddell at ubuntu.com>
Maintainer: Kubuntu Developers <kubuntu-devel at lists.ubuntu.com>
https://launchpad.net/ubuntu/karmic/+source/kdenetwork/4:4.3.2-0ubuntu4.1
-------------- next part --------------
Format: 1.8
Date: Wed, 12 May 2010 10:19:09 +0100
Source: kdenetwork
Binary: kdenetwork kdenetwork-filesharing kget libkopete4 kopete libkopete-dev kppp krdc krfb kdenetwork-dbg kde-zeroconf kopete-plugin-otr-kde4
Architecture: source
Version: 4:4.3.2-0ubuntu4.1
Distribution: karmic-security
Urgency: low
Maintainer: Kubuntu Developers <kubuntu-devel at lists.ubuntu.com>
Changed-By: Jonathan Riddell <jriddell at ubuntu.com>
Description: 
 kde-zeroconf - zeroconf plugins and kio slaves for KDE 4
 kdenetwork - networking applications from the official KDE 4 release
 kdenetwork-dbg - debugging symbols for the KDE 4 networking module
 kdenetwork-filesharing - network filesharing configuration module for KDE 4
 kget       - download manager for KDE 4
 kopete     - instant messenger for KDE 4
 kopete-plugin-otr-kde4 - Transitional package
 kppp       - modem dialer for KDE 4
 krdc       - Remote Desktop Connection client for KDE 4
 krfb       - Desktop Sharing for KDE 4
 libkopete-dev - development files for the KDE 4 networking module
 libkopete4 - main Kopete library
Changes: 
 kdenetwork (4:4.3.2-0ubuntu4.1) karmic-security; urgency=low
 .
   * SECURITY UPDATE: file name directory traversal attack (LP: #578856).
    - Add debian/patches/kubuntu_01_kget_CVE-2010-1000.diff
    - kget/ui/metalinkcreator/metalinker.cpp check filename is valid
    - CVE-2010-1000, SA39528
Checksums-Sha1: 
 50bb7eae352ece948dbe42c557df1df1a2cedfac 2336 kdenetwork_4.3.2-0ubuntu4.1.dsc
 1cb3ba1b0e450cf520a60da28bb90e92ecd502b7 49608 kdenetwork_4.3.2-0ubuntu4.1.diff.gz
Checksums-Sha256: 
 e7f6b0c80e8b74256c999d73c6ac5d77cda42d2f3dfd0077204df1e6e3e57fa2 2336 kdenetwork_4.3.2-0ubuntu4.1.dsc
 5920ae07b5719fab1f60d269cb5c80214be393fbd8864abddd08dc3ca2febe77 49608 kdenetwork_4.3.2-0ubuntu4.1.diff.gz
Files: 
 2066dd83aa643a2044c8582968ca9846 2336 kde optional kdenetwork_4.3.2-0ubuntu4.1.dsc
 d171ba8c8bf38db27cce3533b695c324 49608 kde optional kdenetwork_4.3.2-0ubuntu4.1.diff.gz
Launchpad-Bugs-Fixed: 578856
Original-Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde at lists.debian.org>