[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-devel
Subject:    Re: [kde-announce] KDE Project Security Advisory: kwallet: Fix CBC encryption handling
From:       Luc Menut <lmenut () free ! fr>
Date:       2015-01-10 22:30:58
Message-ID: 54B1A822.8010806 () free ! fr
[Download RAW message or body]

Hello,

Le 10/01/2015 17:27, Albert Astals Cid a écrit :
> KDE Project Security Advisory
> =============================
>
> Title:          Fix kwalletd CBC encryption handling
> Risk Rating:    Low
> CVE:            CVE-2013-7252
> Platforms:      All
> Versions:       kwalletd < Applications 14.12.1, KF5::KWallet < 5.6.0
> Author:         Valentin Rusu <kde@rusu.info>
> Date:           9 January 2015
>

...

>
> Solution
> ========
>
> For kde-runtime KWallet upgrade to KDE Applications 14.12.1 or apply the
> following patch:
>    http://quickgit.kde.org/?p=kde-runtime.git&a=commit&h=14a8232d0b5b1bc5e0ad922292c6b5a1c501165c

I see this patch in master and KDE/4.12, but not in KDE/4.13, KDE/4.14 
and Applications/14.12.
Is it not needed for these 3 branches (KDE/4.13, KDE/4.14 and 
Applications/14.12), fixed in another way ???

regards,
Luc


-- 
Luc Menut

>> Visit http://mail.kde.org/mailman/listinfo/kde-devel#unsub to unsubscribe <<
[prev in list] [next in list] [prev in thread] [next in thread]