| Summary: | kdebase4-workspace 4.11.14 fix security vulnerability and various bugs | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | Luc Menut <lmenut> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | normal | ||
| Priority: | Normal | CC: | geiger.david68210, olivier.delaune, rverschelde, sysadmin-bugs |
| Version: | 4 | Keywords: | validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | http://lwn.net/Vulnerabilities/619817/ | ||
| Whiteboard: | MGA4-32-OK MGA4-64-OK advisory | ||
| Source RPM: | kdebase4-workspace-4.11.12-1.mga4 | CVE: | |
| Status comment: | |||
|
Description
Luc Menut
2014-11-17 00:11:30 CET
Suggested advisory: Updated kdebase4-workspace packages fix security vulnerability and various bugs This update fixes a security vulnerability in the KDE workspace configuration module for setting the date and time - CVE-2014-8651 - (mga#14578), and fixes some additional issues: - fix foreground color for GTK2 menus (bko#127861), - improve contrast for rendering checkbox marks, arrows, etc (bko#337433), - fix icons size in kmenuedit (bko#338883). References: https://bugs.mageia.org/show_bug.cgi?id=14578 https://www.kde.org/info/security/advisory-20141106-1.txt https://bugs.kde.org/show_bug.cgi?id=127861 https://bugs.kde.org/show_bug.cgi?id=337433 https://bugs.kde.org/show_bug.cgi?id=338883 Assignee:
bugsquad =>
qa-bugs Tested Mageia 4 i586. Desktop still works OK. Couldn't reproduce the CVE, but no noticeable changes in kcmshell4 clock. Gtk+2 menus look fine in chbg. kmenuedit looks fine. Whiteboard:
(none) =>
MGA4-32-OK Tested mga4_64, real hardware Testing complete for the new kdebase4-workspace-4.11.14-1.mga4 update, Ok for me. All seems to work properly here and nothing to report. CC:
(none) =>
geiger.david68210 Thanks David. Validating now. Advisory in Comment 1, package list in Comment 0. Could someone please upload the advisory? Sysadmins, once the advisory is uploaded, please push to core/updates_testing. Thanks. Keywords:
(none) =>
validated_update Advisory uploaded. CC:
(none) =>
remi Just a little question. Why this KDE package are in version 4.11.14 while other are in version 4.12.5? CC:
(none) =>
olivier.delaune It's frozen upstream, so it stays as a 4.11.x version. An update for this issue has been pushed to Mageia Updates repository. http://advisories.mageia.org/MGASA-2014-0480.html Status:
NEW =>
RESOLVED |