----------------------------------------------------------------------

Secunia customers receive relevant and filtered advisories.
Delivery is done via different channels including SMS, Email, Web,
and https based XML feed.
http://corporate.secunia.com/trial/38/request/

----------------------------------------------------------------------

TITLE:
Mandriva update for kdelibs

SECUNIA ADVISORY ID:
SA24705

VERIFY ADVISORY:
http://secunia.com/advisories/24705/

CRITICAL:
Less critical

IMPACT:
Cross Site Scripting

WHERE:
>From remote

REVISION:
1.1 originally posted 2007-04-04

OPERATING SYSTEM:
Mandriva Linux 2007
http://secunia.com/product/12165/

DESCRIPTION:
Mandriva has issued an update for kdelibs. This fixes a
vulnerability, which potentially can be exploited by malicious people
to conduct cross-site scripting attacks in applications using the
library.

For more information:
SA24727

SOLUTION:
Apply updated packages.

-- Mandriva Linux 2007 --

0aa169f71ee453bfae98225220c331cc 
2007.0/i586/kdelibs-common-3.5.4-19.5mdv2007.0.i586.rpm
540a3bc9d82874b836b30a6948ef3bc9 
2007.0/i586/kdelibs-devel-doc-3.5.4-19.5mdv2007.0.i586.rpm
825e626133ee2026b57a734d4afa8b44 
2007.0/i586/libkdecore4-3.5.4-19.5mdv2007.0.i586.rpm
506795606555cd7ece65961e2a9b2b3a 
2007.0/i586/libkdecore4-devel-3.5.4-19.5mdv2007.0.i586.rpm 
75268625fe932b3031f10b431263c4a2  
2007.0/SRPMS/kdelibs-3.5.4-19.5mdv2007.0.src.rpm

-- Mandriva Linux 2007/X86_64 --

1e3ce972420dfd5fa9f59f7488aad8ec 
2007.0/x86_64/kdelibs-common-3.5.4-19.5mdv2007.0.x86_64.rpm
5dd0d9118284bed00433f49758507199 
2007.0/x86_64/kdelibs-devel-doc-3.5.4-19.5mdv2007.0.x86_64.rpm
59e713d7e771adc76c681a748661f7df 
2007.0/x86_64/lib64kdecore4-3.5.4-19.5mdv2007.0.x86_64.rpm
0c927e5eeaf866777896e3931dbdc8a1 
2007.0/x86_64/lib64kdecore4-devel-3.5.4-19.5mdv2007.0.x86_64.rpm 
75268625fe932b3031f10b431263c4a2  
2007.0/SRPMS/kdelibs-3.5.4-19.5mdv2007.0.src.rpm

ORIGINAL ADVISORY:
http://www.mandriva.com/security/advisories?name=MDKSA-2007:076

OTHER REFERENCES:
SA24727:
http://secunia.com/advisories/24727/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------