MGASA-2014-0327
Dashboard / Vulnerabilities / MGASA-2014-0327
Summary: Updated kdelibs4 packages fix security vulnerability and various bugs
Details: This update fixes a security vulnerability in the polkit authentication backend of kdelibs (CVE-2014-5033) (mga#13792), and fixes some additional issues: - duplicate targets in PythonMacros.cmake (reviewboard kde 111371), - kded4 leak sockets in NetworkInterface::isWireless() (bko#324954), - media type application/x-konsole is unsupported (bko#292378), - pure Qt applications (like VLC) that get the kdelibs file dialog are not properly translated (mga#12982), - meinproc4 doesn't substitute entity with libxml2 fixed for CVE-2014-0191 (bko#335001, mga#13555, mga#13559),
References: https://advisories.mageia.org/MGASA-2014-0327.html, https://bugs.mageia.org/show_bug.cgi?id=13826, https://bugs.mageia.org/show_bug.cgi?id=13792, http://www.kde.org/info/security/advisory-20140730-1.txt, https://bugzilla.novell.com/show_bug.cgi?id=864716, https://git.reviewboard.kde.org/r/111371/, https://bugs.kde.org/show_bug.cgi?id=324954, https://bugs.kde.org/show_bug.cgi?id=292378, https://bugs.mageia.org/show_bug.cgi?id=12982, https://bugs.kde.org/show_bug.cgi?id=335001, https://bugs.mageia.org/show_bug.cgi?id=13555, https://bugs.mageia.org/show_bug.cgi?id=13559
Affected packages
Package
Name: kdelibs4
Purl: pkg:rpm/mageia/kdelibs4?arch=source&distro=mageia-3
Affected ranges
Type: ECOSYSTEM
Events:
