oss-sec mailing list archives

CVE Request: kdelibs


From: Seth Arnold <seth.arnold () canonical com>
Date: Fri, 10 May 2013 14:31:05 -0700

Hello Kurt, Steve, all,

A bug in our Launchpad [1] refers to KDE Bug 319428 [2] as fixing a
security issue: displaying raw URLs, including passwords, in a handful
of error messages. A patch is in git [3] to sanitize URLs before
displaying them in the affected error messages.

1: https://bugs.launchpad.net/ubuntu/+source/kde4libs/+bug/1178286
2: https://bugs.kde.org/show_bug.cgi?id=319428
3: http://commits.kde.org/kdelibs/65d736dab592bced4410ccfa4699de89f78c96ca

Please assign a CVE number for this issue. Thank you.

Seth

Attachment: signature.asc
Description: Digital signature


Current thread: