==========================================================Ubuntu Security Notice USN-872-1          December 11, 2009
kdebase-runtime vulnerabilities
https://launchpad.net/bugs/495301
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 8.10
Ubuntu 9.04
Ubuntu 9.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 8.10:
  kdebase-runtime                 4:4.1.4-0ubuntu1~intrepid1.2

Ubuntu 9.04:
  kdebase-runtime                 4:4.2.2-0ubuntu1.1

Ubuntu 9.10:
  kdebase-runtime                 4:4.3.2-0ubuntu4.1

After a standard system upgrade you need to restart your session to effect
the necessary changes.

Details follow:

It was discovered that the KIO subsystem of KDE did not properly perform
input validation when processing help:// URIs. If a user or KIO application
processed a crafted help:// URI, an attacker could trigger JavaScript
execution or access files via directory traversal.


Updated packages for Ubuntu 8.10:

  Source archives:

          Size/MD5:    36571 c37c88ec1cbeb1f4be4fb11d4cf69e12
          Size/MD5:     2134 199cf0744b1d6b6c557be41f1ffe8a79
          Size/MD5: 55390394 448e488058f9a5c9304c1aca9dea1195

  Architecture independent packages:

          Size/MD5: 13847918 82a952384c9d8219c3c4849cda32b122
          Size/MD5:   349078 b8d003a5ec5b6c2c2ccc15f160d843bd
          Size/MD5:  3093066 ce0070ce6f875497d9c89d22f5b69682

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:    70162 ebeb319d74ad0252bbf12462c13de95f
          Size/MD5: 11920218 33ff88e2a7c2803c88ded6600631edfc
          Size/MD5:  1688916 ac321645399d1202cdfaae464748fc89
          Size/MD5:  1875854 3b5792d1d65fffd5f09328a196fde58f
          Size/MD5:   172540 1742ffe7ffcdce4527722cd6ce8391ac
          Size/MD5:    15910 c890a2e850b2f847b091b108b0615b9c

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:    66428 2010c46d4d3e6c1bf7ef765cca5a39eb
          Size/MD5: 11777512 b682bed24a3001a94944744d5c7bd304
          Size/MD5:  1568690 e57e92c4fb6c344484d617f5e89857c1
          Size/MD5:  1864474 675af9075d6374fed6a1f493c491222f
          Size/MD5:   158396 54fcedea907fc851290c323b3932f256
          Size/MD5:    15910 8c546383f5d1fa13f82c48fb2b1b38de

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:    66648 108d528ede245aebe6a01fa946ed44a5
          Size/MD5: 11789554 a09c5b73f99285524448436d9531533a
          Size/MD5:  1586454 2e8304acb8fa5e70906c3b8174c08df3
          Size/MD5:  1865860 1b5fec520664c671f5f8c2198b251689
          Size/MD5:   158812 f8897b22030218f55ee094d2b0a38a67
          Size/MD5:    15902 11a3558f49ca8af971b2e7524e8af2d5

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:    76604 13da40bbcc022dafa801b32aa9413327
          Size/MD5: 12470754 20f48d33e07520e0a27d1d6ddd40c4c5
          Size/MD5:  1800142 6543ca81406125e3f67e632546324b9c
          Size/MD5:  1879472 30cf02d9bf140a05c64b5e9feed12fc3
          Size/MD5:   171248 21947ef75437823f8b25126505fbbd8a
          Size/MD5:    15912 7578be999383c9ad946416bf855ae135

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:    71676 04e43f2ba8c3664dfbdd4eb5be6c77c3
          Size/MD5: 11638306 457f370027fa59048bf9f863f70b5a95
          Size/MD5:  1575166 bd718951faaaeb8d37fcd784cf52ba25
          Size/MD5:  1873072 f7a088c52f8859d81e896d199c27f5ea
          Size/MD5:   163190 e99b428baf3c654eedfa04f731ace641
          Size/MD5:    15916 5072343fbda451ffe5242c1713b3b1de

Updated packages for Ubuntu 9.04:

  Source archives:

          Size/MD5:    40714 cfe9d30de0fd8c69c7d8bb379990b8d1
          Size/MD5:     2104 2ac1ace35e54d7f0f3b01f9dc70e60b7
          Size/MD5: 72242787 0c4c3ffbf545f71d25e2038276d05aff

  Architecture independent packages:

          Size/MD5: 15382880 2d6c3a59ef3c65c0387f602fd0f2bb82
          Size/MD5:   200520 be9188dd71132097fe31f227a2357ef9
          Size/MD5:  3534474 c0f0e2f69e5f359e1680abf900750f19

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:    64132 a334b94fce2bda7be4f1e7beec32f3a4
          Size/MD5: 16371098 24cdeb9115b053d0fc9986e7c170e02d
          Size/MD5:  2055046 b4d92abccf254a5b6bfca56bef0602df
          Size/MD5:  1831642 ad873037c482fbf1c2cd318db2540521
          Size/MD5:     7554 a9dea18c80c0b524247458ef54bad493

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:    60450 82119b21ffef45aacc48f6edb4358de2
          Size/MD5: 16199734 3f453f6d4f2d6b46b983eb9849129830
          Size/MD5:  1906484 eca048b5f7dd707b80d424eb804abb37
          Size/MD5:  1820720 b192075129b5364872ff9799274b670d
          Size/MD5:     7546 40b060388b2a90619223b5647cf51485

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:    61250 123e5c98cc6d526fd5ada38bfa59da76
          Size/MD5: 16207338 1d3bdb9b6a6aa3f4c98ebb8c01c0b3ef
          Size/MD5:  1928090 7bffbab55c8d89f83922bacc654a9858
          Size/MD5:  1822704 5e9598befccd89f7a759d9d4fad59386
          Size/MD5:     7542 9749c79062a0281145af5db1d26278db

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:    71666 2ecbcf941411c7dd94efc3c1bdceb954
          Size/MD5: 17096780 3aed961751066584a48300b86637fb39
          Size/MD5:  2176844 3648fcaef48bb8f85277616e134ee50b
          Size/MD5:  1836380 fa8d421e654b2e3152a120d228be1ef4
          Size/MD5:     7552 4f4b1f1e032b6aa8bc7a9fc5e1200f8c

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:    65380 ead7bcd9dee0f506ae336213666e43d4
          Size/MD5: 16054148 791ac16760793ab9e26326f4ef5943a8
          Size/MD5:  1922982 02a8a25de38ee5512d84eedc15829a38
          Size/MD5:  1831290 28d69a1bef078760801b15280bcd0053
          Size/MD5:     7548 68d9089d31aab1227a2a4bb13e7e0019

Updated packages for Ubuntu 9.10:

  Source archives:

          Size/MD5:    43739 4c7f4fc39ca280a92ba04ec32a15e694
          Size/MD5:     2236 cebe4be39e025c9e8ab302c35342a8a2
          Size/MD5:  7914828 27fbe1543099373d43bec3280695f74f

  Architecture independent packages:

          Size/MD5:   180122 0edd69e4c5ddc97fc7b7183a6ad75d9b
          Size/MD5:  3919240 3e5c58210ddf9ed57bfcf73bcc85f436

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:    51996 f587ae131b9bc750d7f0a5ba3eb3673a
          Size/MD5: 10512030 29ca5c7ff10e75fd444bdef204b51e8d
          Size/MD5:  1508594 d54a24b130c1f66a5f1b313fe570abf0
          Size/MD5:  1717084 fbe49cdf3301df0df0a58e9cf49031ef
          Size/MD5:     7566 09191b1006aa011fb08d68442745df7b
          Size/MD5:   289518 eec3287fc379574e77c6dfcff4f7d814

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:    50478 f4c0127dde62e73c3bdae13e34ae8c1e
          Size/MD5: 10399956 d3f9e29789ecf62fb33d0f25abf1a54b
          Size/MD5:  1437076 d5b8253ce02e6ab35fd8539dd55aa59a
          Size/MD5:  1711822 b29e6287dee20a8fd21734ce792b1851
          Size/MD5:     7564 52fb0f686a6d44906c07de570c3807b7
          Size/MD5:   282580 250ebb27f43e56eeca3e7a5e024f5e27

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:    52368 cc378311780223a6993b7d63c2f2fe5e
          Size/MD5: 10409406 ad536a0eead81fdaf4cdb6755e1bea47
          Size/MD5:  1485320 cfa8859b48cc3ff409fb1a65224d34a4
          Size/MD5:  1715892 7a03d450f14f72d64342ff50cdc8bd48
          Size/MD5:     7566 dcc5449888c689aa61e3f56bb636d8c0
          Size/MD5:   292078 b4bcc886406cd876b617c65fae869cb0

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:    49242 14dfebd9f06b5a6885871b9980ba4b45
          Size/MD5: 10427318 a73247fe519ac020fcc732582bdc3572
          Size/MD5:  1312778 ee99e24c303cc8dff277a6dbe01109b4
          Size/MD5:  1704864 8fe8a77e37aa36a41dd4908b40d99257
          Size/MD5:     7574 2bdc311c086ec68de4356fa46b11a3de
          Size/MD5:   258384 8dc0a3833e401313aa8b229aa43c10dc

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:    51426 28c48f3e2e00777fc2b8c9af121fca1e
          Size/MD5:  9652854 08634cbb43d6decea29568d0a8692ba3
          Size/MD5:  1290964 4504589f207dd711116619bb8ee86fed
          Size/MD5:  1700812 11c412fef79551e861e67d64d483d015
          Size/MD5:     7568 a7d4f1bf330ba2afbabc49d86febb225
          Size/MD5:   252010 cb93b6ac8041a85d4339bf99fc443f06