FLEA-2007-0042-1 qt

From: Foresight Linux Essential Announcement Service <foresight-security-noreply@foresightlinux.org>
To: foresight-security-announce@lists.rpath.org
Cc: security-alerts@linuxsecurity.com,full-disclosure@lists.grok.org.uk,bugtraq@securityfocus.com,lwn@lwn.net
Subject: FLEA-2007-0042-1 qt
Date:


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Foresight Linux Essential Advisory: 2007-0042-1
Published: 2007-08-03

Rating: Moderate

Updated Versions:
    qt=/conary.rpath.com@rpl:devel//foresight.rpath.org@fl:1-devel//1/3.3.8_r653471-0.2-1
    group-dist=/foresight.rpath.org@fl:1-devel//1/1.3.2-0.7-5

References:
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3388
    https://issues.rpath.com/browse/RPL-1597

Description:
    Previous versions of the qt package are vulnerable to user-assisted
    format-string attacks, possibly leading to arbitrary code execution in
    applications that use the QTextEdit widget.

    Note that while Foresight ships qt for compatibility with third-party
    applications, Foresight Linux does not include any components which use qt,
    so a default install is not exposed to this issue.

- ---

Copyright 2007 Foresight Linux Project
This file is distributed under the terms of the MIT License.
A copy is available at http://www.foresightlinux.org/permanent/mit-license.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (GNU/Linux)
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=LBqs
-----END PGP SIGNATURE-----





Copyright © 1995-2018 LinuxRocket.net. All rights reserved.