qt security update

2006-11-0121:03:30

CentOS Project

lists.centos.org

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.115

Percentile

95.3%

JSON

CentOS Errata and Security Advisory CESA-2006:0725

Qt is a software toolkit that simplifies the task of writing and
maintaining GUI (Graphical User Interface) applications for the X Window
System.

An integer overflow flaw was found in the way Qt handled certain pixmap
images. If an application linked against Qt created a pixmap image in a
certain way, it could lead to a denial of service or possibly allow the
execution of arbitrary code. (CVE-2006-4811)

Users of Qt should upgrade to these updated packages, which contain a
backported patch to correct this issue.

Affected packages:
qt
qt-MySQL
qt-ODBC
qt-PostgreSQL
qt-config
qt-designer
qt-devel

Upstream details at:
https://access.redhat.com/errata/RHSA-2006:0725
https://access.redhat.com/errata/RHSA-2006:0726

OSVersionArchitecturePackageVersionFilename
CentOS4ia64qt< 3.3.3-10.RHEL4qt-3.3.3-10.RHEL4.ia64.rpm
CentOS4ia64qt-mysql< 3.3.3-10.RHEL4qt-MySQL-3.3.3-10.RHEL4.ia64.rpm
CentOS4ia64qt-odbc< 3.3.3-10.RHEL4qt-ODBC-3.3.3-10.RHEL4.ia64.rpm
CentOS4ia64qt-postgresql< 3.3.3-10.RHEL4qt-PostgreSQL-3.3.3-10.RHEL4.ia64.rpm
CentOS4ia64qt-config< 3.3.3-10.RHEL4qt-config-3.3.3-10.RHEL4.ia64.rpm
CentOS4ia64qt-designer< 3.3.3-10.RHEL4qt-designer-3.3.3-10.RHEL4.ia64.rpm
CentOS4ia64qt-devel< 3.3.3-10.RHEL4qt-devel-3.3.3-10.RHEL4.ia64.rpm
CentOS3ia64qt< 3.1.2-14.RHEL3qt-3.1.2-14.RHEL3.ia64.rpm
CentOS3ia64qt-mysql< 3.1.2-14.RHEL3qt-MySQL-3.1.2-14.RHEL3.ia64.rpm
CentOS3ia64qt-odbc< 3.1.2-14.RHEL3qt-ODBC-3.1.2-14.RHEL3.ia64.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	4	ia64	qt	< 3.3.3-10.RHEL4	qt-3.3.3-10.RHEL4.ia64.rpm
CentOS	4	ia64	qt-mysql	< 3.3.3-10.RHEL4	qt-MySQL-3.3.3-10.RHEL4.ia64.rpm
CentOS	4	ia64	qt-odbc	< 3.3.3-10.RHEL4	qt-ODBC-3.3.3-10.RHEL4.ia64.rpm
CentOS	4	ia64	qt-postgresql	< 3.3.3-10.RHEL4	qt-PostgreSQL-3.3.3-10.RHEL4.ia64.rpm
CentOS	4	ia64	qt-config	< 3.3.3-10.RHEL4	qt-config-3.3.3-10.RHEL4.ia64.rpm
CentOS	4	ia64	qt-designer	< 3.3.3-10.RHEL4	qt-designer-3.3.3-10.RHEL4.ia64.rpm
CentOS	4	ia64	qt-devel	< 3.3.3-10.RHEL4	qt-devel-3.3.3-10.RHEL4.ia64.rpm
CentOS	3	ia64	qt	< 3.1.2-14.RHEL3	qt-3.1.2-14.RHEL3.ia64.rpm
CentOS	3	ia64	qt-mysql	< 3.1.2-14.RHEL3	qt-MySQL-3.1.2-14.RHEL3.ia64.rpm
CentOS	3	ia64	qt-odbc	< 3.1.2-14.RHEL3	qt-ODBC-3.1.2-14.RHEL3.ia64.rpm