Stay Secure with the Latest Linux Advisories

security advisorygentoocritical

Gentoo: 200302-03 Critical Qt-dcgui File Leak Remote Exploit

All versions < 0.2.2 have a major security vulnerability in the directory parser.. - -------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200302-03 - -------------------------------------------------------------------- PACKAGE : qt-dcgui SUMMARY : file leaking DATE : 2003-02-04 15:03 UTC EXPLOIT : remote - -------------------------------------------------------------------- From announcment: "All versions < 0.2.2 have a major security vulnerability in the directory parser. This bug allow a remote attacker to download files outside the sharelist. It's recommend that you upgrade the packages immediatly." Read the full announcment at: SOLUTION It is recommended that all Gentoo Linux users who are running net-p2p/qt-dcgui upgrade to qt-dcgui-0.2.4 as follows: emerge sync emerge -u qt-dcgui emerge clean - -------------------------------------------------------------------- This email address is being protected from spambots. You need JavaScript enabled to view it. - GnuPG key is available at This email address is being protected from spambots. You need JavaScript enabled to view it. - -------------------------------------------------------------------- . - -------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNC. versions, major, security, vulnerability, directory, parser, ----------------. . Severity: Critical. LinuxSecurity.com Team

Feb 04, 2003 •Critical Gentoo