| Summary: | Update candidate for kdelibs | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | John Balcaen <balcaen.john> |
| Component: | RPM Packages | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | |
| Severity: | normal | ||
| Priority: | Normal | CC: | balcaen.john, davidwhodgins, sysadmin-bugs, tmb |
| Version: | 1 | Keywords: | validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Source RPM: | CVE: | ||
| Status comment: | |||
| Bug Depends on: | |||
| Bug Blocks: | 1324, 3174, 3436 | ||
| Attachments: | html page that crashes with older kdelibs installed. | ||
|
Description
John Balcaen
2011-11-23 03:56:03 CET
John Balcaen
2011-11-23 03:56:55 CET
CC:
(none) =>
balcaen.john I have three LUKS encrypted filesystems on LVM logical volumes, only one of which is normally mounted. None of them are showing up in dolphin. Are LUKS filesystems on internal hard drives supposed to show up? I can confirm the kcharselect crash is fixed on i586 systems. CC:
(none) =>
davidwhodgins Well the patch is based on this https://bugs.kde.org/show_bug.cgi?id=181847 minor a fix added to ensure it's not showing every thing (see https://bugs.kde.org/show_bug.cgi?id=286179 ). If it's not working as expected then we'll simply remove the « LUKS announcement » :p, i did not find the time to create a LUKS permission & so to test it . I'm going to add an additional CVE fix for http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0046 since it was added on fedora. Ok i did push on the BS a new kdelibs with the fix for this CVE, the src.rpm is kdelibs4-4.6.5-1.5.mga1.src.rpm To the Advisory should be now : This update provides a security fix for CVE-2010-0046: CSS format() arguments were always treated as strings, which could result in a crash or arbitrary code execution if an integer or other unexpected type was used instead You can read https://bugs.webkit.org/show_bug.cgi?id=31815 http://trac.webkit.org/changeset/51727 for additional information This update provides also additional bugfixes forupstream bugs & mageia specifics issues : - a fix for kcharselect is included see https://bugs.kde.org/show_bug.cgi?id=235020 - NFS drives are now visible in dolphin - The autorisation error on first boot related to mga #1324 is gone - A crash of konqueror/rekonq is fixed ( see https://bugs.kde.org/270209 & https://bugs.kde.org/show_bug.cgi?id=278926 )
John Balcaen
2011-11-24 13:11:57 CET
Blocks:
(none) =>
3436 Created attachment 1116 [details]
html page that crashes with older kdelibs installed.
Testing complete on i586 for the srpm
kdelibs4-4.6.5-1.5.mga1.src.rpm
The attached page causes konqueror to crash with the older kdelibs
installed. With the update installed, it displays PASS.
Also confirmed kcharselect no longer crashes when going from the
european script to the african scrip.
I created a new user to try and reproduce the errors for bug 1324 but ~/.local/share/ was already created and being used by akonadi. # ls /home/test1/.local/share/ akonadi/ local-mail/ I didn't receive any errors when logging in for the first time. Reproduced konquerer crash (Thanks Dave) and kcharselect crash. I've not tested the updated libs yet. John, is this the correct way to reproduce bug 1324? The easy way to reproduce it is to use the xguest user in fact. x86_64 I wasn't able to reproduce bug 1324. Confirmed fix for konqueror and kcharselect. No regressions noticed. Validating the update. Advisory ==================== This update provides a security fix for CVE-2010-0046: CSS format() arguments were always treated as strings, which could result in a crash or arbitrary code execution if an integer or other unexpected type was used instead. You can read https://bugs.webkit.org/show_bug.cgi?id=31815 http://trac.webkit.org/changeset/51727 for additional information. This update also provides additional bugfixes for upstream bugs & mageia specifics issues : - a fix for kcharselect is included see https://bugs.kde.org/show_bug.cgi?id=235020 - NFS drives are now visible in dolphin - The autorisation error on first boot related to mga #1324 is gone - A crash of konqueror/rekonq is fixed ( see https://bugs.kde.org/270209 & https://bugs.kde.org/show_bug.cgi?id=278926 ) ====================== SRPM: kdelibs4-4.6.5-1.5.mga1.src.rpm Could sysadmin please push from core/updates_testing to core updates Thankyou! Keywords:
(none) =>
validated_update Update pushed. Status:
NEW =>
RESOLVED |