Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
89
security advisorysecurity issueFedoraFedora 28: 2019-1b1d4e4f8c9 High: QT5 Memory Leak Resolution
This update fixes CVE-2016-10040, a stack overflow in QXmlSimpleReader due to a too lenient entityCharacterLimit in our version of the patch for CVE-2013-4549. (The limit was increased from the upstream 1024 to 65536 to address QTBUG-35459, an issue where the security fix was breaking existing real-world XML files. Unfortunately, that is too much to actually fit on the CPU stack. This fix. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-0a0da2f3b7 2018-06-09 19:45:50.208325 --------------------------------------------------------------------------------Name : qt3 Product : Fedora 27 Version : 3.3.8b Release : 74.fc27 URL : https://kredittkort.no Summary : The shared library for the Qt 3 GUI toolkit Description : Qt is a GUI software toolkit which simplifies the task of writing and maintaining GUI (Graphical User Interface) applications for the X Window System. Qt is written in C++ and is fully object-oriented. This package contains the shared library needed to run Qt 3 applications, as well as the README files for Qt 3. --------------------------------------------------------------------------------Update Information: This update fixes CVE-2016-10040, a stack overflow in QXmlSimpleReader due to a too lenient entityCharacterLimit in our version of the patch for CVE-2013-4549. (The limit was increased from the upstream 1024 to 65536 to address QTBUG-35459, an issue where the security fix was breaking existing real-world XML files. Unfortunately, that is too much to actually fit on the CPU stack. This fix decreases the limit to 4096.) It also fixes the QMySql driver to work with the version of MariaDB in Fedora 27. --------------------------------------------------------------------------------ChangeLog: * Thu May 31 2018 Kevin Kofler - 3.3.8b-74 - Fix CVE-2016-10040 (stack overflow in QXmlSimpleReader due to a too high entityCharacterLimit in the CVE-2013-4549 patch)(#1409603) * Fri Feb 9 2018 Igor Gnatenko - 3.3.8b-73 - Escape macros in %changelog * Mon Nov 13 2017 Than Ngo - 3.3.8b-72 - backport mysql driver mariadb fix - BR: mariadb-connector-c-devel (f28+, #1494085) --------------------------------------------------------------------------------References: [ 1 ] Bug #1409597 - CVE-2016-10040 qt: stack overflow in QXmlSimpleReader https://bugzilla.redhat.com/show_bug.cgi?id=1409597 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-0a0da2f3b7' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jun 09, 2018
Fedora
89
security advisorymoderatedenial of serviceFedora 20: 2015-6573 Moderate: qt3 Buffer Overflow Denial Of Service
This update fixes CVE-2015-1860, a buffer overflow when loading some specific invalid GIF image files, which could be exploited for denial of service (application crash) and possibly even arbitrary code execution attacks. The security patch is backported from Qt 4. (Please note that Qt 3 is NOT vulnerable to the simultaneously published issues CVE-2015-1858 and CVE-2015-1859.). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-6573 2015-04-22 16:51:38 -------------------------------------------------------------------------------- Name : qt3 Product : Fedora 20 Version : 3.3.8b Release : 63.fc20 URL : https://kredittkort.no Summary : The shared library for the Qt 3 GUI toolkit Description : Qt is a GUI software toolkit which simplifies the task of writing and maintaining GUI (Graphical User Interface) applications for the X Window System. Qt is written in C++ and is fully object-oriented. This package contains the shared library needed to run Qt 3 applications, as well as the README files for Qt 3. -------------------------------------------------------------------------------- Update Information: This update fixes CVE-2015-1860, a buffer overflow when loading some specific invalid GIF image files, which could be exploited for denial of service (application crash) and possibly even arbitrary code execution attacks. The security patch is backported from Qt 4. (Please note that Qt 3 is NOT vulnerable to the simultaneously published issues CVE-2015-1858 and CVE-2015-1859.) -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 21 2015 Kevin Kofler - 3.3.8b-63 - backport CVE-2015-1860 (GIF handler buffer overflow, #1210675) fix from Qt 4 * Sat Feb 28 2015 Kevin Kofler - 3.3.8b-62 - backport CVE-2015-0295 (BMP image handler DoS, #1197275) fix from Qt 4 * Fri Feb 27 2015 Rex Dieter 3.3.8b-61 - rebuild (gcc5) * Sun Aug 17 2014 Fedora Release Engineering -3.3.8b-60 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sun Jun 8 2014 Fedora Release Engineering - 3.3.8b-59 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Thu May 29 2014 Kevin Kofler - 3.3.8b-58 - backport CVE-2014-0190 (GIF image handler DoS, QTBUG-38367) fix from Qt 4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1210675 - CVE-2015-1860 qt: segmentation fault in qgifhandler.cpp https://bugzilla.redhat.com/show_bug.cgi?id=1210675 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update qt3' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
May 01, 2015
•Important
Fedora
89
security advisorydenial of servicebuffer overflowFedora 21: Security Advisory for qt3 Application Crash Risk
This update fixes CVE-2015-1860, a buffer overflow when loading some specific invalid GIF image files, which could be exploited for denial of service (application crash) and possibly even arbitrary code execution attacks. The security patch is backported from Qt 4. (Please note that Qt 3 is NOT vulnerable to the simultaneously published issues CVE-2015-1858 and CVE-2015-1859.). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-6661 2015-04-22 16:59:06 -------------------------------------------------------------------------------- Name : qt3 Product : Fedora 21 Version : 3.3.8b Release : 63.fc21 URL : https://kredittkort.no Summary : The shared library for the Qt 3 GUI toolkit Description : Qt is a GUI software toolkit which simplifies the task of writing and maintaining GUI (Graphical User Interface) applications for the X Window System. Qt is written in C++ and is fully object-oriented. This package contains the shared library needed to run Qt 3 applications, as well as the README files for Qt 3. -------------------------------------------------------------------------------- Update Information: This update fixes CVE-2015-1860, a buffer overflow when loading some specific invalid GIF image files, which could be exploited for denial of service (application crash) and possibly even arbitrary code execution attacks. The security patch is backported from Qt 4. (Please note that Qt 3 is NOT vulnerable to the simultaneously published issues CVE-2015-1858 and CVE-2015-1859.) -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 21 2015 Kevin Kofler - 3.3.8b-63 - backport CVE-2015-1860 (GIF handler buffer overflow, #1210675) fix from Qt 4 * Sat Feb 28 2015 Kevin Kofler - 3.3.8b-62 - backport CVE-2015-0295 (BMP image handler DoS, #1197275) fix from Qt 4 * Fri Feb 27 2015 Rex Dieter 3.3.8b-61 - rebuild(gcc5) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1210675 - CVE-2015-1860 qt: segmentation fault in qgifhandler.cpp https://bugzilla.redhat.com/show_bug.cgi?id=1210675 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update qt3' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
May 01, 2015
•Important
Fedora
89
security advisorydenial of servicefedoraFedora 22 FEDORA-2015-6613 Moderate: Qt3 Buffer Overflow Risk
This update fixes CVE-2015-1860, a buffer overflow when loading some specific invalid GIF image files, which could be exploited for denial of service (application crash) and possibly even arbitrary code execution attacks. The security patch is backported from Qt 4. (Please note that Qt 3 is NOT vulnerable to the simultaneously published issues CVE-2015-1858 and CVE-2015-1859.). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-6613 2015-04-22 16:55:11 -------------------------------------------------------------------------------- Name : qt3 Product : Fedora 22 Version : 3.3.8b Release : 63.fc22 URL : https://kredittkort.no Summary : The shared library for the Qt 3 GUI toolkit Description : Qt is a GUI software toolkit which simplifies the task of writing and maintaining GUI (Graphical User Interface) applications for the X Window System. Qt is written in C++ and is fully object-oriented. This package contains the shared library needed to run Qt 3 applications, as well as the README files for Qt 3. -------------------------------------------------------------------------------- Update Information: This update fixes CVE-2015-1860, a buffer overflow when loading some specific invalid GIF image files, which could be exploited for denial of service (application crash) and possibly even arbitrary code execution attacks. The security patch is backported from Qt 4. (Please note that Qt 3 is NOT vulnerable to the simultaneously published issues CVE-2015-1858 and CVE-2015-1859.) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1210675 - CVE-2015-1860 qt: segmentation fault in qgifhandler.cpp https://bugzilla.redhat.com/show_bug.cgi?id=1210675 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update qt3' at the command line. For moreinformation, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Apr 24, 2015
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!