kdelibs 4:3.5.10.dfsg.1-2ubuntu5 source package in Ubuntu

Changelog

kdelibs (4:3.5.10.dfsg.1-2ubuntu5) karmic; urgency=low

  * SECURITY UPDATE: fix vulnerability with NULL byte in Subject Alternate
    Names field of X.509 certificates
    - debian/patches/security_04_CVE-2009-2702.diff: verify that the
      QString length of the SAN is not shorter than the ASN1 length
    - CVE-2009-2702
  * kubuntu_glibc_2.8_ftbfs.diff: fix FTBFS when using gcc 4.4 or higher
  * Following patches forward ported from http://www.ubuntu.com/usn/USN-822-1
    (by Marc Deslauriers)
  * SECURITY UPDATE: arbitrary code execution via JavaScript garbage
    collector allocation failures
    - debian/patches/security_01_CVE-2009-1687.diff: make sure we don't
      overflow before doing the realloc in kjs/collector.cpp.
    - CVE-2009-1687
  * SECURITY UPDATE: arbitrary code execution via use-after-free
    - debian/patches/security_02_CVE-2009-1690.diff: use head.get() in
      khtml/html/htmlparser.cpp, and backport khtml/html/{AlwaysInline,
      htmlparser,Platform,RefPtr}.h.
    - CVE-2009-1690
  * SECURITY UPDATE: arbitrary code execution via CSS attr function call
    with a large numerical argument
    - debian/patches/security_03_CVE-2009-1698.diff: add extra checks to
      khtml/css/cssparser.cpp and implement CSSPrimitiveValue::CSS_ATTR in
      khtml/css/css_valueimpl.cpp.
    - CVE-2009-1698

 -- Jamie Strandboge <email address hidden>   Tue, 15 Sep 2009 14:38:04 -0500