|
|
| Problem Description |
KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial
of service (application crash) by calling the replaceChild method on a
DOM object, which triggers a null dereference, as demonstrated by calling
document.replaceChild with a 0 (zero) argument.
This issue does not affect Corporate 3.0.
Updated packages have been patched to correct this issue.
| Updated Packages |
Mandriva Linux 2006
9c08048d1eae88a7b1969464d026383d 2006.0/RPMS/kdelibs-common-3.4.2-31.4.20060mdk.i586.rpm 03181cb4ee659c54cde567e36bb8d0ee 2006.0/RPMS/kdelibs-devel-doc-3.4.2-31.4.20060mdk.i586.rpm 5a1e16d3e441004c80ced1a4537fa9a5 2006.0/RPMS/libkdecore4-3.4.2-31.4.20060mdk.i586.rpm 2dfd44b73866f4a8551f9368553a1d44 2006.0/RPMS/libkdecore4-devel-3.4.2-31.4.20060mdk.i586.rpm 76afd9e941b89499e0e3b4bf2045ffad 2006.0/SRPMS/kdelibs-3.4.2-31.4.20060mdk.src.rpm
Mandriva Linux 2006/X86_64
5de19da9121964246ee06c9eab9ece91 x86_64/2006.0/RPMS/kdelibs-common-3.4.2-31.4.20060mdk.x86_64.rpm 392daaeb1744ea56dfd6005c0ee1500a x86_64/2006.0/RPMS/kdelibs-devel-doc-3.4.2-31.4.20060mdk.x86_64.rpm 4a2b6d8f83f9d5d00b2272334ddf6f24 x86_64/2006.0/RPMS/lib64kdecore4-3.4.2-31.4.20060mdk.x86_64.rpm 137d119a30a44a9abc4d221354883599 x86_64/2006.0/RPMS/lib64kdecore4-devel-3.4.2-31.4.20060mdk.x86_64.rpm 5a1e16d3e441004c80ced1a4537fa9a5 x86_64/2006.0/RPMS/libkdecore4-3.4.2-31.4.20060mdk.i586.rpm 2dfd44b73866f4a8551f9368553a1d44 x86_64/2006.0/RPMS/libkdecore4-devel-3.4.2-31.4.20060mdk.i586.rpm 76afd9e941b89499e0e3b4bf2045ffad x86_64/2006.0/SRPMS/kdelibs-3.4.2-31.4.20060mdk.src.rpm
| References |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3672
| Upgrade |
To upgrade automatically, use MandrivaUpdate.
| Verification |
Please verify the update prior to upgrading to ensure the integrity of the downloaded package. You can do this with the command :
rpm --checksig package.rpm
You can get the GPG public key of the Mandriva Security Team to verify the GPG signature of each RPM.
If you use MandrivaUpdate, the verification of md5 checksum and GPG signature is performed automatically for you.