Two security issues have been discovered in kdegraphics, the graphics apps from the official KDE release. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-0945 It was discovered that the KSVG animation element implementation suffers from a null pointer dereference flaw, which could lead to the execution of arbitrary code. CVE-2009-1709 It was discovered that the KSVG animation element implementation is prone to a use-after-free flaw, which could lead to the execution of arbitrary code. For the oldstable distribution (etch), these problems have been fixed in version 4:3.5.5-3etch4. For the stable distribution (lenny), these problems have been fixed in version 4:3.5.9-3+lenny2. For the testing distribution (squeeze) and the unstable distribution (sid), these problems have been fixed in version 4:4.0. We recommend that you upgrade your kdegraphics packages.
Two security issues have been discovered in kdegraphics, the graphics apps from the official KDE release. The Common Vulnerabilities and Exposures project identifies the following problems:
It was discovered that the KSVG animation element implementation suffers from a null pointer dereference flaw, which could lead to the execution of arbitrary code.
It was discovered that the KSVG animation element implementation is prone to a use-after-free flaw, which could lead to the execution of arbitrary code.
For the oldstable distribution (etch), these problems have been fixed in version 4:3.5.5-3etch4.
For the stable distribution (lenny), these problems have been fixed in version 4:3.5.9-3+lenny2.
For the testing distribution (squeeze) and the unstable distribution (sid), these problems have been fixed in version 4:4.0.
We recommend that you upgrade your kdegraphics packages.
MD5 checksums of the listed files are available in the original advisory.
Vulmon