konqueror URL bar spoofing

[Kees Cook]

Binary package hint: kdebase

CVE-2007-3820 CVE-2007-4224 CVE-2007-4225

http://www.kde.org/info/security/advisory-20070914-1.txt

...
5. Patch:

        Patches for KDE 3.5.7 and newer is available from
        ftp://ftp.kde.org/pub/kde/security_patches :

        e15d6b5580c5a20ab935f8e553d113e0 post-3.5.7-kdebase-konqueror-2.diff
        4c0fb2576875ded606f276421fc49752 post-3.5.7-kdelibs-kdecore-2.diff

        Patches for KDE 3.4.2 and newer is available from
        ftp://ftp.kde.org/pub/kde/security_patches :

        d9a07e8d9a138ef9da90b7af8e35d977 post-3.4.2-kdebase-konqueror.diff

[Kees Cook (kees)]

Fixed in Dapper, Edgy, Feisty already. kdelibs is only affected by CVE-2007-4225. kdebase is affected by all three.