dbg111-kde4-kdnssd openSUSE 11.1 DEBUGINFO This update of kdenetwork fixes several bugs, the security related issues are: - CVE-2010-1000: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N): CWE-22 The "name" attribute of the "file" element of metalink files is not properly sanitised this can be exploited to download files to arbitrary directories. - CVE-2008-4776: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P): CWE-119 The included libgadu version allowed remote servers to cause a denial of service (crash) via a buffer over-read. Non-security issues: - bnc#653852: kopete: ICQ login broken; login server changed - bnc#516347: kopete cant connect to yahoo kdenetwork4-debuginfo-4.1.3-4.15.1.i586.rpm kdenetwork4-debuginfo-4.1.3-4.15.1.ppc.rpm kdenetwork4-debuginfo-4.1.3-4.15.1.x86_64.rpm kdenetwork4-debugsource-4.1.3-4.15.1.i586.rpm kdenetwork4-debugsource-4.1.3-4.15.1.ppc.rpm kdenetwork4-debugsource-4.1.3-4.15.1.x86_64.rpm