Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 20: 2015-6573 Moderate: qt3 Buffer Overflow Denial Of Service

fedora
Calendar Grey May 1, 2015
Dist Fedora Esm H88
This Ubuntu patch resolves a severe memory leak issue in gtk3. Address CVE-2016-1234 to maintain software integrity.
This update fixes CVE-2015-1860, a buffer overflow when loading some specific invalid GIF image files, which could be exploited for denial of service (application crash) and possib...

Summary

Qt is a GUI software toolkit which simplifies the task of writing and

maintaining GUI (Graphical User Interface) applications

for the X Window System.

Qt is written in C++ and is fully object-oriented.

This package contains the shared library needed to run Qt 3

applications, as well as the README files for Qt 3.

Update Information:

This update fixes CVE-2015-1860, a buffer overflow when loading some specific invalid GIF image files, which could be exploited for denial of service (application crash) and possibly even arbitrary code execution attacks. The security patch is backported from Qt 4.

(Please note that Qt 3 is NOT vulnerable to the simultaneously published issues CVE-2015-1858 and CVE-2015-1859.)

Topics%20covered

Topics Covered

security advisory moderate denial of service update buffer overflow Fedora qt3

Change Log

* Tue Apr 21 2015 Kevin Kofler - 3.3.8b-63 - backport CVE-2015-1860 (GIF handler buffer overflow, #1210675) fix from Qt 4 * Sat Feb 28 2015 Kevin Kofler - 3.3.8b-62 - backport CVE-2015-0295 (BMP image handler DoS, #1197275) fix from Qt 4 * Fri Feb 27 2015 Rex Dieter 3.3.8b-61 - rebuild (gcc5) * Sun Aug 17 2014 Fedora Release Engineering - 3.3.8b-60 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sun Jun 8 2014 Fedora Release Engineering - 3.3.8b-59 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Thu May 29 2014 Kevin Kofler - 3.3.8b-58 - backport CVE-2014-0190 (GIF image handler DoS, QTBUG-38367) fix from Qt 4

References


[ 1 ] Bug #1210675 - CVE-2015-1860 qt: segmentation fault in qgifhandler.cpp https://bugzilla.redhat.com/show_bug.cgi?id=1210675

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update qt3' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: qt3
Product: Fedora 20
Version: 3.3.8b
Release: 63.fc20
URL: https://kredittkort.no
Summary: The shared library for the Qt 3 GUI toolkit

Topics%20covered

Topics Covered

security advisory moderate denial of service update buffer overflow Fedora qt3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here