qt security update

2006-11-0201:19:36

CentOS Project

lists.centos.org

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.115

Percentile

95.3%

JSON

CentOS Errata and Security Advisory CESA-2006:0725-01

Qt is a software toolkit that simplifies the task of writing and
maintaining GUI (Graphical User Interface) applications for the X Window
System.

An integer overflow flaw was found in the way Qt handled certain pixmap
images. If an application linked against Qt created a pixmap image in a
certain way, it could lead to a denial of service or possibly allow the
execution of arbitrary code. (CVE-2006-4811)

Users of Qt should upgrade to these updated packages, which contain a
backported patch to correct this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2006-November/075507.html

Affected packages:
qt
qt-Xt
qt-designer
qt-devel
qt-static

OSVersionArchitecturePackageVersionFilename
CentOS2i386qt< 2.3.1-12.EL2qt-2.3.1-12.EL2.i386.rpm
CentOS2i386qt-designer< 2.3.1-12.EL2qt-designer-2.3.1-12.EL2.i386.rpm
CentOS2i386qt-devel< 2.3.1-12.EL2qt-devel-2.3.1-12.EL2.i386.rpm
CentOS2i386qt-static< 2.3.1-12.EL2qt-static-2.3.1-12.EL2.i386.rpm
CentOS2i386qt-xt< 2.3.1-12.EL2qt-Xt-2.3.1-12.EL2.i386.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	2	i386	qt	< 2.3.1-12.EL2	qt-2.3.1-12.EL2.i386.rpm
CentOS	2	i386	qt-designer	< 2.3.1-12.EL2	qt-designer-2.3.1-12.EL2.i386.rpm
CentOS	2	i386	qt-devel	< 2.3.1-12.EL2	qt-devel-2.3.1-12.EL2.i386.rpm
CentOS	2	i386	qt-static	< 2.3.1-12.EL2	qt-static-2.3.1-12.EL2.i386.rpm
CentOS	2	i386	qt-xt	< 2.3.1-12.EL2	qt-Xt-2.3.1-12.EL2.i386.rpm