kdebase-runtime 4:4.3.2-0ubuntu4.1 source package in Ubuntu

Changelog

kdebase-runtime (4:4.3.2-0ubuntu4.1) karmic-security; urgency=low

  * SECURITY UPDATE: IO Slaves input sanitization errors
   - KDE protocol handlers perform insufficient input validation, an
     attacker can craft malicious URI that would trigger JavaScript
     execution. Additionally the 'help://' protocol handler suffer from
     directory traversal. It should be noted that the scope of this
     issue is limited as the malicious URIs cannot be embedded in
     Internet hosted content.
   - Add security_01_info_kio_no_javascript.diff, stops javascript
     within info kio slave
   - http://www.kde.org/info/security/advisory-20091027-1.txt
   - oCert: #2009-015 http://www.ocert.org/advisories/ocert-2009-015.html
   - CVE n/a
 -- Jonathan Riddell <email address hidden>   Mon, 07 Dec 2009 17:17:57 +0000