{
  "schema_version": "1.7.0",
  "id": "MGASA-2014-0327",
  "published": "2014-08-12T09:16:46Z",
  "modified": "2014-08-12T09:00:37Z",
  "summary": "Updated kdelibs4 packages fix security vulnerability and various bugs",
  "details": "This update fixes a security vulnerability in the polkit authentication\nbackend of kdelibs (CVE-2014-5033) (mga#13792), and fixes some\nadditional issues:\n - duplicate targets in PythonMacros.cmake (reviewboard kde 111371),\n - kded4 leak sockets in NetworkInterface::isWireless() (bko#324954),\n - media type application/x-konsole is unsupported (bko#292378),\n - pure Qt applications (like VLC) that get the kdelibs file dialog \n   are not properly translated (mga#12982),\n - meinproc4 doesn't substitute entity with libxml2 fixed for \n   CVE-2014-0191 (bko#335001, mga#13555, mga#13559),\n",
  "upstream": [
    "CVE-2014-5033"
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://advisories.mageia.org/MGASA-2014-0327.html"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.mageia.org/show_bug.cgi?id=13826"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.mageia.org/show_bug.cgi?id=13792"
    },
    {
      "type": "ADVISORY",
      "url": "http://www.kde.org/info/security/advisory-20140730-1.txt"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.novell.com/show_bug.cgi?id=864716"
    },
    {
      "type": "WEB",
      "url": "https://git.reviewboard.kde.org/r/111371/"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.kde.org/show_bug.cgi?id=324954"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.kde.org/show_bug.cgi?id=292378"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.mageia.org/show_bug.cgi?id=12982"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.kde.org/show_bug.cgi?id=335001"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.mageia.org/show_bug.cgi?id=13555"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.mageia.org/show_bug.cgi?id=13559"
    }
  ],
  "affected": [
    {
      "package": {
        "ecosystem": "Mageia:3",
        "name": "kdelibs4",
        "purl": "pkg:rpm/mageia/kdelibs4?arch=source&distro=mageia-3"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.10.5-1.2.mga3"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "section": "core"
      }
    }
  ],
  "credits": [
    {
      "name": "Mageia",
      "type": "COORDINATOR",
      "contact": [
        "https://wiki.mageia.org/en/Packages_Security_Team"
      ]
    }
  ]
}