Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE Chromedriver Moderate Security Issues Fixed 2026-10958-1

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed libmozjs Moderate Update CVE-2025-70103

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed Perl HTML Parser Moderate CVE-2026-8829 Advisory

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE Tumbleweed kernel-devel Moderate Security Issue 2026-10954-1

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed Gleam Moderate Threat Fixed 2026-10953-1

Calendar White Jun 08, 2026
moderate
Ubuntu Large Esm H900
Ubuntu

Ubuntu 25.10 Systemd Critical Arbitrary Code Exec DNS Issues USN-8402-1

Calendar White Jun 08, 2026
Critical
Opensuse Large Esm H800
openSUSE

openSUSE Epiphany Important Password Handling Issue CVE-2023-26081

Calendar White Jun 08, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS 8399-1 Pillow Denial of Service Risk CVE-2026-42308

Calendar White Jun 08, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS Poppler Critical DoS Code Execution Vuln USN-8400-1

Calendar White Jun 08, 2026
Critical
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -2 articles for you...
203
Ls Advisories Mageia Esm H240
Price Tag 1security advisorycriticalsecurity fix

Mageia 8 MGASA-2023-0231 Critical: Qt4 Out-Of-Bounds Issues

Out-of-bounds write in QtPrivate::QCommonArrayOps ::growAppend (CVE-2021-45930) QtSvg QSvgFont m_unitsPerEm initialization is mishandled. (CVE-2023-32573) . MGASA-2023-0231 - Updated qt4/qtsvg5 packages fix security vulnerability Publication date: 19 Jul 2023 URL: https://advisories.mageia.org/MGASA-2023-0231.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-45930, CVE-2023-32573 Out-of-bounds write in QtPrivate::QCommonArrayOps ::growAppend (CVE-2021-45930) QtSvg QSvgFont m_unitsPerEm initialization is mishandled. (CVE-2023-32573) References: - https://bugs.mageia.org/show_bug.cgi?id=29913 - https://ubuntu.com/security/notices/USN-5241-1 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/V75XNX4GDB64N5BSOAN474RUXXS5OHRU/ - https://lists.debian.org/debian-lts-announce/2022/01/msg00022.html - https://www.cve.org/CVERecord?id=CVE-2021-45930 - https://www.cve.org/CVERecord?id=CVE-2023-32573 SRPMS: - 8/core/qtsvg5-5.15.2-1.3.mga8 - 8/core/qt4-4.8.7-35.3.mga8 . Ubuntu 2023-0420 resolves serious vulnerabilities in libc6 and libssl1.0.0, increasing overall security robustness.. qt4 Update,qtsvg5 Patch,mageia Security Fix,out-of-bounds Write,security Advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jul 19, 2023 •Critical Mageia
203
Ls Advisories Mageia Esm H240
Price Tag 1security advisorypackage updateDoS

Mageia 8: MGASA-2021-0510 Moderate: qt4 Library Loading Risk

CVE-2020-24741, Do not attempt to load a library relative to $PWD References: - https://bugs.mageia.org/show_bug.cgi?id=29602 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/SEVLZYF3XAD2Q2HTNQP3SIFCQPSXYHAS/ . MGASA-2021-0510 - Updated qt4 packages fix security vulnerability Publication date: 18 Nov 2021 URL: https://advisories.mageia.org/MGASA-2021-0510.html Type: security Affected Mageia releases: 8 CVE: CVE-2020-24741 CVE-2020-24741, Do not attempt to load a library relative to $PWD References: - https://bugs.mageia.org/show_bug.cgi?id=29602 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/SEVLZYF3XAD2Q2HTNQP3SIFCQPSXYHAS/ - https://www.cve.org/CVERecord?id=CVE-2020-24741 SRPMS: - 8/core/qt4-4.8.7-35.2.mga8 . Recently enhanced qt4 updates resolve significant security vulnerabilities for Mageia users, specifically addressing CVE-2020-24742.. qt4 security update, Mageia security advisory, Linux security patch. . LinuxSecurity.com Team

Calendar 2 Nov 18, 2021 Mageia
Banner 1 1028x280 1708121660 1771599717
203
Ls Advisories Mageia Esm H240
Price Tag 1security advisorymoderateupdate

Mageia 7 & 8: 2021-0262 Moderate: Qt4 and Qtsvg5 Info Disclosure

An out of bounds read in function QRadialFetchSimd from crafted svg file may lead to information disclosure or other potential consequences. This update includes the backported upstream fix and should resolve the security issue (CVE-2021-3481). . MGASA-2021-0262 - Updated qt4 and qtsvg5 packages fix a security vulnerability Publication date: 16 Jun 2021 URL: https://advisories.mageia.org/MGASA-2021-0262.html Type: security Affected Mageia releases: 7, 8 CVE: CVE-2021-3481 An out of bounds read in function QRadialFetchSimd from crafted svg file may lead to information disclosure or other potential consequences. This update includes the backported upstream fix and should resolve the security issue (CVE-2021-3481). References: - https://bugs.mageia.org/show_bug.cgi?id=29014 - https://qt-project.atlassian.net//browse/QTBUG-91507 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/O57HZYEVZNCW5L74PDD7K44E7XZEBXRK/ - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/GOBQ75US43TETW2OID6APHQRENDFK4BO/ - https://www.cve.org/CVERecord?id=CVE-2021-3481 SRPMS: - 8/core/qt4-4.8.7-35.1.mga8 - 8/core/qtsvg5-5.15.2-1.1.mga8 - 7/core/qt4-4.8.7-26.3.mga7 - 7/core/qtsvg5-5.12.6-1.1.mga7 . Mageia enhances qt4 and qtsvg5 to address a security vulnerability that might cause data exposure. Release date: 16 Jun.. qt4 Security Update, qtsvg5 Patch, Mageia Vulnerability, Information Disclosure Fix. . LinuxSecurity.com Team

Calendar 2 Jun 16, 2021 Mageia
203
Ls Advisories Mageia Esm H240
Price Tag 1security advisorysecurity issuebuffer overflow

Mageia: 2020-0347 Critical: qt4 and qt5base Buffer Over-read

The read_xbm_body function in gui/image/qxbmhandler.cpp has a buffer over-read (CVE-2020-17507). References: - https://bugs.mageia.org/show_bug.cgi?id=27173 . MGASA-2020-0347 - Updated qt4 and qt5base packages fix security vulnerability Publication date: 27 Aug 2020 URL: https://advisories.mageia.org/MGASA-2020-0347.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-17507 The read_xbm_body function in gui/image/qxbmhandler.cpp has a buffer over-read (CVE-2020-17507). References: - https://bugs.mageia.org/show_bug.cgi?id=27173 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/426FCC6JNK4JUEX5QHJQDYQ6MUVQ3E6P/ - https://www.cve.org/CVERecord?id=CVE-2020-17507 SRPMS: - 7/core/qt4-4.8.7-26.2.mga7 - 7/core/qtbase5-5.12.6-4.mga7 . Mageia unveils revised qt4 and qt5base packages to resolve security flaw issues, effective August 27.. Mageia Security, qt Security Update, Buffer Overflow Fix, Open Source Security. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Aug 27, 2020 •Critical Mageia
Banner 1 1028x280 1708121660 1771599717
203
Ls Advisories Mageia Esm H240
Price Tag 1security advisorysecurity issuedivision by zero

Mageia 6: 2019-0161 Critical: Qt4 Crash From Malformed PPM Image

Updated qt4 packages fix security vulnerability: A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp (CVE-2018-19872). . MGASA-2019-0161 - Updated qt4 packages fix security vulnerability Publication date: 12 May 2019 URL: https://advisories.mageia.org/MGASA-2019-0161.html Type: security Affected Mageia releases: 6 CVE: CVE-2018-19872 Updated qt4 packages fix security vulnerability: A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp (CVE-2018-19872). References: - https://bugs.mageia.org/show_bug.cgi?id=24600 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/XS6G3ZDFCHWFQD4CFXWFPHREOHBBDTD7/ - https://www.cve.org/CVERecord?id=CVE-2018-19872 SRPMS: - 6/core/qt4-4.8.7-15.1.mga6 . Revised qt4 packages rectify security vulnerability linked to faulty PPM images resulting in crashes on Mageia.. Mageia, qt4, security flaw, crash issue, malformed image. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 12, 2019 •Critical Mageia
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisorymoderateRed Hat

Red Hat Enterprise Linux 5 RHSA-2011:1324-01 Moderate: Qt4 Input Sanitation

Updated qt4 packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: qt4 security update Advisory ID: RHSA-2011:1324-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2011:1324.html Issue date: 2011-09-21 CVE Names: CVE-2007-0242 CVE-2011-3193 ==================================================================== 1. Summary: Updated qt4 packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 3. Description: Qt 4 is a software toolkit that simplifies the task of writing and maintaining GUI (Graphical User Interface) applications for the X Window System. HarfBuzz is an OpenType text shaping engine. A flaw in the way Qt 4 expanded certain UTF-8 characters could be used to prevent a Qt 4 based application from properly sanitizing user input. Depending on the application, this could allow an attacker to perform directory traversal, or for web applications, a cross-site scripting (XSS) attack. (CVE-2007-0242) A buffer overflow flaw was found in the harfbuzz module in Qt 4. If a user loaded a specially-crafted font file with an application linked againstQt 4, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2011-3193) Users of Qt 4 should upgrade to these updated packages, which contain backported patches to correct these issues. All running applications linked against Qt 4 libraries must be restarted for this update to take effect. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259 5. Bugs fixed (https://bugzilla.redhat.com/): 234633 - CVE-2007-0242 QT UTF8 improper character expansion 733118 - CVE-2011-3193 qt/harfbuzz buffer overflow 6. Package List: Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: qt4-4.2.1-1.el5_7.1.i386.rpm qt4-debuginfo-4.2.1-1.el5_7.1.i386.rpm qt4-doc-4.2.1-1.el5_7.1.i386.rpm qt4-mysql-4.2.1-1.el5_7.1.i386.rpm qt4-odbc-4.2.1-1.el5_7.1.i386.rpm qt4-postgresql-4.2.1-1.el5_7.1.i386.rpm qt4-sqlite-4.2.1-1.el5_7.1.i386.rpm x86_64: qt4-4.2.1-1.el5_7.1.i386.rpm qt4-4.2.1-1.el5_7.1.x86_64.rpm qt4-debuginfo-4.2.1-1.el5_7.1.i386.rpm qt4-debuginfo-4.2.1-1.el5_7.1.x86_64.rpm qt4-doc-4.2.1-1.el5_7.1.x86_64.rpm qt4-mysql-4.2.1-1.el5_7.1.x86_64.rpm qt4-odbc-4.2.1-1.el5_7.1.x86_64.rpm qt4-postgresql-4.2.1-1.el5_7.1.x86_64.rpm qt4-sqlite-4.2.1-1.el5_7.1.x86_64.rpm RHEL Desktop Workstation (v. 5 client): Source: i386: qt4-debuginfo-4.2.1-1.el5_7.1.i386.rpm qt4-devel-4.2.1-1.el5_7.1.i386.rpm x86_64: qt4-debuginfo-4.2.1-1.el5_7.1.i386.rpm qt4-debuginfo-4.2.1-1.el5_7.1.x86_64.rpm qt4-devel-4.2.1-1.el5_7.1.i386.rpm qt4-devel-4.2.1-1.el5_7.1.x86_64.rpm Red Hat Enterprise Linux (v. 5server): Source: i386: qt4-4.2.1-1.el5_7.1.i386.rpm qt4-debuginfo-4.2.1-1.el5_7.1.i386.rpm qt4-devel-4.2.1-1.el5_7.1.i386.rpm qt4-doc-4.2.1-1.el5_7.1.i386.rpm qt4-mysql-4.2.1-1.el5_7.1.i386.rpm qt4-odbc-4.2.1-1.el5_7.1.i386.rpm qt4-postgresql-4.2.1-1.el5_7.1.i386.rpm qt4-sqlite-4.2.1-1.el5_7.1.i386.rpm ia64: qt4-4.2.1-1.el5_7.1.ia64.rpm qt4-debuginfo-4.2.1-1.el5_7.1.ia64.rpm qt4-devel-4.2.1-1.el5_7.1.ia64.rpm qt4-doc-4.2.1-1.el5_7.1.ia64.rpm qt4-mysql-4.2.1-1.el5_7.1.ia64.rpm qt4-odbc-4.2.1-1.el5_7.1.ia64.rpm qt4-postgresql-4.2.1-1.el5_7.1.ia64.rpm qt4-sqlite-4.2.1-1.el5_7.1.ia64.rpm ppc: qt4-4.2.1-1.el5_7.1.ppc.rpm qt4-4.2.1-1.el5_7.1.ppc64.rpm qt4-debuginfo-4.2.1-1.el5_7.1.ppc.rpm qt4-debuginfo-4.2.1-1.el5_7.1.ppc64.rpm qt4-devel-4.2.1-1.el5_7.1.ppc.rpm qt4-devel-4.2.1-1.el5_7.1.ppc64.rpm qt4-doc-4.2.1-1.el5_7.1.ppc.rpm qt4-mysql-4.2.1-1.el5_7.1.ppc.rpm qt4-odbc-4.2.1-1.el5_7.1.ppc.rpm qt4-postgresql-4.2.1-1.el5_7.1.ppc.rpm qt4-sqlite-4.2.1-1.el5_7.1.ppc.rpm s390x: qt4-4.2.1-1.el5_7.1.s390.rpm qt4-4.2.1-1.el5_7.1.s390x.rpm qt4-debuginfo-4.2.1-1.el5_7.1.s390.rpm qt4-debuginfo-4.2.1-1.el5_7.1.s390x.rpm qt4-devel-4.2.1-1.el5_7.1.s390.rpm qt4-devel-4.2.1-1.el5_7.1.s390x.rpm qt4-doc-4.2.1-1.el5_7.1.s390x.rpm qt4-mysql-4.2.1-1.el5_7.1.s390x.rpm qt4-odbc-4.2.1-1.el5_7.1.s390x.rpm qt4-postgresql-4.2.1-1.el5_7.1.s390x.rpm qt4-sqlite-4.2.1-1.el5_7.1.s390x.rpm x86_64: qt4-4.2.1-1.el5_7.1.i386.rpm qt4-4.2.1-1.el5_7.1.x86_64.rpm qt4-debuginfo-4.2.1-1.el5_7.1.i386.rpm qt4-debuginfo-4.2.1-1.el5_7.1.x86_64.rpm qt4-devel-4.2.1-1.el5_7.1.i386.rpm qt4-devel-4.2.1-1.el5_7.1.x86_64.rpm qt4-doc-4.2.1-1.el5_7.1.x86_64.rpm qt4-mysql-4.2.1-1.el5_7.1.x86_64.rpm qt4-odbc-4.2.1-1.el5_7.1.x86_64.rpm qt4-postgresql-4.2.1-1.el5_7.1.x86_64.rpm qt4-sqlite-4.2.1-1.el5_7.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7.References: https://access.redhat.com/security/cve/CVE-2007-0242 https://access.redhat.com/security/cve/CVE-2011-3193 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2011 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFOeiiFXlSAg2UNWIIRAjjUAJ9rg/DAsKiCaBzpimfDXYtb2SeC9ACglQdk s669t10+b0vFWbTleNEVLmk=YK8A -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . New qt4 updates address several security vulnerabilities with a moderate threat level for users of Red Hat Enterprise Linux 5.. qt4 Security Update, Red Hat Advisory, Buffer Overflow Fix, Cross-Site Scripting, Enterprise Linux Security. . LinuxSecurity.com Team

Calendar 2 Sep 21, 2011 Red Hat
Banner 1 1028x280 1708121660 1771599717
200
Ls Advisories Scientific Esm H240
Price Tag 1security advisorybuffer overflowdirectory traversal

Scientific Linux 5: CVE-2007-0242 Moderate: Qt4 XSS And Buffer Overflow

Moderate: qt4 security update. Date: Tue, 20 Sep 2011 14:19:43 -0500 Reply-To: Pat Riehecky Sender: Security Errata for Scientific Linux From: Pat Riehecky Organization: Fermilab Subject: FASTBUGS for SL 5x i386, x86_64 now available MIME-Version: 1.0 The following FASTBUGS have been uploadedto i386: autofs-5.0.1-0.rc2.156.el5_7.1.i386.rpm boost-1.33.1-10.el5_7.3.i386.rpm boost-devel-1.33.1-10.el5_7.3.i386.rpm boost-doc-1.33.1-10.el5_7.3.i386.rpm buildsys-macros-5-5.el5.noarch.rpm certmonger-0.42-1.el5_7.1.i386.rpm ghostscript-8.70-6.el5_7.3.i386.rpm ghostscript-devel-8.70-6.el5_7.3.i386.rpm ghostscript-gtk-8.70-6.el5_7.3.i386.rpm ipa-client-2.0-14.el5_7.1.i386.rpm kdeadmin-3.5.4-4.el5.i386.rpm kdebase-3.5.4-25.el5.i386.rpm kdebase-devel-3.5.4-25.el5.i386.rpm kdeutils-3.5.4-6.el5.i386.rpm kdeutils-devel-3.5.4-6.el5.i386.rpm python-2.4.3-44.el5_7.1.i386.rpm python-devel-2.4.3-44.el5_7.1.i386.rpm python-libs-2.4.3-44.el5_7.1.i386.rpm python-tools-2.4.3-44.el5_7.1.i386.rpm switchdesk-4.0.8-7.el5.noarch.rpm switchdesk-gui-4.0.8-7.el5.noarch.rpm system-config-users-1.2.51-7.el5.noarch.rpm tkinter-2.4.3-44.el5_7.1.i386.rpm yum-rhn-plugin-0.5.4-22.el5_7.2.noarch.rpm x86_64: autofs-5.0.1-0.rc2.156.el5_7.1.x86_64.rpm boost-1.33.1-10.el5_7.3.i386.rpm boost-1.33.1-10.el5_7.3.x86_64.rpm boost-devel-1.33.1-10.el5_7.3.i386.rpm boost-devel-1.33.1-10.el5_7.3.x86_64.rpm boost-doc-1.33.1-10.el5_7.3.x86_64.rpm buildsys-macros-5-5.el5.noarch.rpm certmonger-0.42-1.el5_7.1.x86_64.rpm ghostscript-8.70-6.el5_7.3.i386.rpm ghostscript-8.70-6.el5_7.3.x86_64.rpm ghostscript-devel-8.70-6.el5_7.3.i386.rpm ghostscript-devel-8.70-6.el5_7.3.x86_64.rpm ghostscript-gtk-8.70-6.el5_7.3.x86_64.rpm ipa-client-2.0-14.el5_7.1.x86_64.rpm kdeadmin-3.5.4-4.el5.x86_64.rpm kdebase-3.5.4-25.el5.i386.rpm kdebase-3.5.4-25.el5.x86_64.rpm kdebase-devel-3.5.4-25.el5.i386.rpm kdebase-devel-3.5.4-25.el5.x86_64.rpm kdeutils-3.5.4-6.el5.x86_64.rpm kdeutils-devel-3.5.4-6.el5.x86_64.rpm python-2.4.3-44.el5_7.1.x86_64.rpm python-devel-2.4.3-44.el5_7.1.i386.rpm python-devel-2.4.3-44.el5_7.1.x86_64.rpm python-libs-2.4.3-44.el5_7.1.x86_64.rpm python-tools-2.4.3-44.el5_7.1.x86_64.rpm switchdesk-4.0.8-7.el5.noarch.rpm switchdesk-gui-4.0.8-7.el5.noarch.rpm system-config-users-1.2.51-7.el5.noarch.rpm tkinter-2.4.3-44.el5_7.1.x86_64.rpm yum-rhn-plugin-0.5.4-22.el5_7.2.noarch.rpm Date: Wed, 21 Sep 2011 14:45:29 -0500 Reply-To: Pat Riehecky Sender: Security Errata for Scientific Linux From: Pat Riehecky Organization: Fermilab Subject: Security ERRATA Moderate: qt4 on SL5.x i386/x86_64 MIME-Version: 1.0 Synopsis: Moderate: qt4 security update Issue Date: 2011-09-21 CVE Numbers: CVE-2007-0242 CVE-2011-3193 Qt 4 is a software toolkit that simplifies the task of writing and maintaining GUI (Graphical User Interface) applications for the X Window System. HarfBuzz is an OpenType text shaping engine. A flaw in the way Qt 4 expanded certain UTF-8 characters could be used to prevent a Qt 4 based application from properly sanitizing user input. Depending on the application, this could allow an attacker to perform directory traversal, or for web applications, a cross-site scripting (XSS) attack. (CVE-2007-0242) A buffer overflow flaw was found in the harfbuzz module in Qt 4. If a user loaded a specially-crafted font file with an application linked against Qt 4, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2011-3193) Users of Qt 4 should upgrade to these updated packages, which contain backported patches to correct these issues. All running applications linked against Qt 4 libraries must be restarted for this update to take effect. SL5: i386 qt4-4.2.1-1.el5_7.1.i386.rpm qt4-sqlite-4.2.1-1.el5_7.1.i386.rpm qt4-postgresql-4.2.1-1.el5_7.1.i386.rpm qt4-odbc-4.2.1-1.el5_7.1.i386.rpm qt4-mysql-4.2.1-1.el5_7.1.i386.rpm qt4-doc-4.2.1-1.el5_7.1.i386.rpm qt4-devel-4.2.1-1.el5_7.1.i386.rpm qt4-debuginfo-4.2.1-1.el5_7.1.i386.rpm x86_64 qt4-postgresql-4.2.1-1.el5_7.1.x86_64.rpm qt4-odbc-4.2.1-1.el5_7.1.x86_64.rpm qt4-mysql-4.2.1-1.el5_7.1.x86_64.rpm qt4-doc-4.2.1-1.el5_7.1.x86_64.rpm qt4-devel-4.2.1-1.el5_7.1.x86_64.rpm qt4-devel-4.2.1-1.el5_7.1.i386.rpm qt4-debuginfo-4.2.1-1.el5_7.1.x86_64.rpm qt4-debuginfo-4.2.1-1.el5_7.1.i386.rpm qt4-4.2.1-1.el5_7.1.x86_64.rpm qt4-4.2.1-1.el5_7.1.i386.rpm qt4-sqlite-4.2.1-1.el5_7.1.x86_64.rpm - Scientific Linux Development Team . A crucial security patch for qt4 has been issued, targeting vulnerabilities in Scientific Linux. Users should update their packages and follow the guidelines to improve system security. qt4 Security Update, Scientific Linux Advisory, Buffer Overflow Issue, Directory Traversal Risk. . LinuxSecurity.com Team

Calendar 2 Sep 21, 2011 Scientific Linux
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here