Stay Secure with the Latest Linux Advisories

security advisorymoderatecross-site scripting

Slackware 10.2 and 11.0 Security Advisory: Addressing Qt XSS Vulnerability

New qt packages are available for Slackware 10.2, 11.0, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] qt (SSA:2007-093-03) New qt packages are available for Slackware 10.2, 11.0, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: https://www.cve.org/CVERecord?id=CVE-2007-0242 Here are the details from the Slackware 11.0 ChangeLog: +--------------------------+ patches/packages/qt-3.3.8-i486-1_slack11.0.tgz: Patched an issue where the Qt UTF 8 decoder may in some instances fail to reject overlong sequences, possibly allowing "/../" path injection or XSS errors. For more information, see: https://www.cve.org/CVERecord?id=CVE-2007-0242 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Updated package for Slackware 10.2: Updated package for Slackware 11.0: Updated package for Slackware -current: MD5 signatures: +-------------+ Slackware 10.2 package: 793d29a0b2ace2baf44a3f71ac9a7879 qt-3.3.4-i486-4_slack10.2.tgz Slackware 11.0 package: 4c1a3f1c9095156a57f5292e4cb73673 qt-3.3.8-i486-1_slack11.0.tgz Slackware -current package: e8be820d81d7d3486ed9e210500a5e06 qt-3.3.8-i486-3.tgz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg qt-3.3.8-i486-1_slack11.0.tgz +-----+ . Updated qt libraries for Slackware versions 10.2, 11.0, and -current have been released to address security vulnerabilities and come with comprehensive installation guides.. Qt Update, Slackware Security, Package Management, Software Fix, XSS Patch. . Severity: Critical. LinuxSecurity.com Team

Apr 03, 2007 •Critical Slackware