KDE flaws put Linux, Unix systems at risk

TalkBack 22 of 74:

Next »

« Previous

• Thread View
• Flat View

Common mistake for the newbie like osreinstall

First you must read and UNDERSTAND the advisory:

KDE kjs UTF-8 Encoded URI Buffer Overflow Vulnerability
http://secunia.com/advisories/18500/

Then you will realise the problem is in kdelibs.

To fix the problem you update your distributions version of
kdelibs if affected. For example RHEL 4 (other versions
unaffected) the instructions can be found here:

https://rhn.redhat.com/errata/RHSA-2006-0184.html

The problem is very serious for KDE users, but clearly it doesn't
require "builder"s to move from kdelibs (fix is available to all
their users by updating kdelibs) and "newbies" don't have to
recompile anything, nor does this issue have anything to do with
the kernel.

"Might as well be monoculture with the effort involved in
switching."

It is a common problem with the increasing number of MSCEs
commenting on *nix system. Their lack of knowledge is quite
frightening and clearly demonstrated in these ill-informed
attacks after a linux vulnerability article.

Linux gives you choice of desktop (or none). Only KDE users are
affected by this serious vulnerability. No monoculture issues for
users or "builder"s.

Posted by: Richard Flude   Posted on: 01/21/06 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now
• The Impact of Virtualization Software on Operating Environments VMware Today's use of virtualization technology allows IT professionals to ... Download Now
• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now