Two security issues have been discovered in kdegraphics, the graphics apps from the official KDE release. The Common Vulnerabilities and Exposures project identifies the following problems:
It was discovered that the KSVG animation element implementation suffers from a null pointer dereference flaw, which could lead to the execution of arbitrary code.
It was discovered that the KSVG animation element implementation is prone to a use-after-free flaw, which could lead to the execution of arbitrary code.
For the oldstable distribution (etch), these problems have been fixed in version 4:3.5.5-3etch4.
For the stable distribution (lenny), these problems have been fixed in version 4:3.5.9-3+lenny2.
For the testing distribution (squeeze) and the unstable distribution (sid), these problems have been fixed in version 4:4.0.
We recommend that you upgrade your kdegraphics packages.
MD5 checksums of the listed files are available in the original advisory.