KDE 3.0.5b Info Page

KDE 3.0.5b was released on April 9th, 2003 in response to the PS/PDF handling vulnerability.

Security Issues

Please report possible problems to security@kde.org.

• The telnet, rlogin, ssh and mailto URI handlers in KDE do not check for '-' at the beginning of the hostname passed, which makes it possible to pass an option to the programs started by the handlers. Read the detailed advisory. All versions of KDE up to KDE 3.2.2 are affected.

FAQ

See the KDE FAQ for any specific questions you may have. Questions about Konqueror should be directed to the Konqueror FAQ and sound related questions are answered in the FAQ of the aRts Project

Download and Installation

Source code

These source packages have been digitally signed with GnuPG using the KDE Archives PGP Key (available from the KDE Signature page or public key servers).

The translation package has been split into individual language packages so you can download only the translations you need.

Binary packages

Binary packages can be found under http://download.kde.org/stable/3.0.5b/ or in the equivalent directory at one of the KDE FTP mirrors.

Additional binary packages might become available in the coming weeks, as well as updates to the current packages.

Updates

Security Issues

Please report possible problems to security@kde.org.

Bugs

This is a list of grave bugs and common pitfalls surfacing after the release date:

• A HTTP authentication credentials leak via the a "Referrer" was discovered by George Staikos in Konqueror. If the HTTP authentication credentials were part of the URL they would be possibly sent in the referer header to a 3rd party web site. Read the detailed advisory. KDE 3.1.3 and newer are not vulnerable.

Developer Info

If you need help porting your application to KDE 3.x see the porting guide or subscribe to the KDE Devel Mailinglist to ask specific questions about porting your applications.

There is also info on the architecture and the programming interface of KDE 3.0.