Skip to content
OpenAdvisories
Unscored RHSA-2004:412 3 CVEs

Red Hat Security Advisory: kdelibs, kdebase security update

Published Sep 17, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as kdebase 6:3.1.3-5.4
Red Hat · RHEL 3 enterprise_linux:3::as kdebase-debuginfo 6:3.1.3-5.4
Red Hat · RHEL 3 enterprise_linux:3::as kdebase-devel 6:3.1.3-5.4
Red Hat · RHEL 3 enterprise_linux:3::as kdelibs 6:3.1.3-6.6
Red Hat · RHEL 3 enterprise_linux:3::as kdelibs-debuginfo 6:3.1.3-6.6
Red Hat · RHEL 3 enterprise_linux:3::as kdelibs-devel 6:3.1.3-6.6
Red Hat · RHEL 3 enterprise_linux:3::desktop kdebase 6:3.1.3-5.4
Red Hat · RHEL 3 enterprise_linux:3::desktop kdebase-debuginfo 6:3.1.3-5.4
Red Hat · RHEL 3 enterprise_linux:3::desktop kdebase-devel 6:3.1.3-5.4
Red Hat · RHEL 3 enterprise_linux:3::desktop kdelibs 6:3.1.3-6.6
Red Hat · RHEL 3 enterprise_linux:3::desktop kdelibs-debuginfo 6:3.1.3-6.6
Red Hat · RHEL 3 enterprise_linux:3::desktop kdelibs-devel 6:3.1.3-6.6
Red Hat · RHEL 3 enterprise_linux:3::es kdebase 6:3.1.3-5.4
Red Hat · RHEL 3 enterprise_linux:3::es kdebase-debuginfo 6:3.1.3-5.4
Red Hat · RHEL 3 enterprise_linux:3::es kdebase-devel 6:3.1.3-5.4
Red Hat · RHEL 3 enterprise_linux:3::es kdelibs 6:3.1.3-6.6
Red Hat · RHEL 3 enterprise_linux:3::es kdelibs-debuginfo 6:3.1.3-6.6
Red Hat · RHEL 3 enterprise_linux:3::es kdelibs-devel 6:3.1.3-6.6
Red Hat · RHEL 3 enterprise_linux:3::ws kdebase 6:3.1.3-5.4
Red Hat · RHEL 3 enterprise_linux:3::ws kdebase-debuginfo 6:3.1.3-5.4
Red Hat · RHEL 3 enterprise_linux:3::ws kdebase-devel 6:3.1.3-5.4
Red Hat · RHEL 3 enterprise_linux:3::ws kdelibs 6:3.1.3-6.6
Red Hat · RHEL 3 enterprise_linux:3::ws kdelibs-debuginfo 6:3.1.3-6.6
Red Hat · RHEL 3 enterprise_linux:3::ws kdelibs-devel 6:3.1.3-6.6

Vulnerabilities 3

  • Unscored —
    CVE-2004-0689

    KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow loc…

  • Unscored —
    CVE-2004-0721

    Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting cont…

  • Unscored —
    CVE-2004-0746

    Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=128462
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=128693
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=129228
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_412.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-0689
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617251
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0689
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0689
  • report
    https://access.redhat.com/security/cve/CVE-2004-0721
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617257
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0721
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0721
  • report
    https://access.redhat.com/security/cve/CVE-2004-0746
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617260
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0746
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0746