full-disclosure - FLEA-2007-0059-1 qt qt-tools

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <4704d4a2.vYUaVIXOjSkjSUKV%foresight-security-noreply@foresightlinux.org>
Date: Thu, 04 Oct 2007 03:55:14 -0800
From: Foresight Linux Essential Announcement Service
	<foresight-security-noreply@...esightlinux.org>
To: foresight-security-announce@...ts.rpath.org
Cc: lwn@....net, security-alerts@...uxsecurity.com, bugtraq@...urityfocus.com,
	full-disclosure@...ts.grok.org.uk
Subject: FLEA-2007-0059-1 qt qt-tools

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Foresight Linux Essential Advisory: 2007-0059-1
Published: 2007-10-04

Rating: Minor

Updated Versions:
    qt=/conary.rpath.com@rpl:devel//foresight.rpath.or@fl:1-devel//1/3.3.8_r653471-0.6-1
    qt-tools=/conary.rpath.com@rpl:devel//foresight.rpath.or@fl:1-devel//1/3.3.8_r653471-0.6-1
    group-dist=/foresight.rpath.org@fl:1-devel//1/1.4.0-0.5-11

References:
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4137

Description:
    Previous version of the qt package are vulnerable to a Denial
    of Service attack in which a maliciously crafted Unicode string may
    cause a heap-based buffer overflow in applications that use the Qt
    libraries. 

    Note that while Foresight ships qt for compatibility with third-party
    applications, Foresight Linux does not include any components which use qt,
    so a default install is not exposed to this issue.

- ---

Copyright 2007 Foresight Linux Project
This file is distributed under the terms of the MIT License.
A copy is available at http://www.foresightlinux.org/permanent/mit-license.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (GNU/Linux)

iQIVAwUBRwTUodfwEn07iAtZAQKhsw//fUjnNU8FrrYCwKehylypTlJU3jSeGLIF
rCFxrpHvvz4wPhLhbhrFlobslnzYXAFmMt/ah0T+rPzCfT1f6S4aPEAWyDmkhcDv
gGZVI9L7YqlCEUJPWk/kuXiZ5rwQ3Jf6/jgqUNGRtvBsLwOMCKhzqsu4Zs1nXkFs
/RgMhQTgExh5rPq+ZxupL+LMf9wSaj1SfQw4zs8E5PygoWpEcv1JWb8HvmFQCWrb
m6CW8xlHG1TzO6P5YsjhQeYuNX0zBazXb3s+sPTTdKk+GUfdjqjl2L24qYQ7+XWe
EA3sma+SIEOr/XQ9Tg0ikrEvzjgniPYDI5q02d6nCk60No5GX4Va0RnMclvKIQ6t
0zwnRAT3fbVY2M9h11NJx/vef+rKeJDNrJMjTQODQ+kEXfgu73W/Nd1auvpRY9Gf
E7H/mCSN3ErVGAd0yDbrPr86+umtbe1gqArsxrDNWt3zR2LHrkd8Sh2PtiJE6Bq4
U5wAHt52GCl6Ns1xIofiyHTu9IsQTCDAVKpCf+VubKtqiGhT/RK+tgDp3vyDSfYN
sFBMrprzRFRe9JBuVQbYoYxg4loSJLDNvmTNCnVcRSZM05H3JsTqrujMAL/8gqZc
HFQt3gAulzDige/pZy8J4Ce2ARe3/LmcM7QYKRFGqlZz/Rtt7cpp5bO8c9CSjrHY
xg9Pi8Mg5zQ=
=7RPw
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/