oxide-qt multiple security vulnerabilities

Information leakage, code execution...

[USN-2320-1] Oxide vulnerabilities

========================================================================== Ubuntu Security Notice USN-2320-1 August 20, 2014 oxide-qt vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu: Security Advisory (USN-2320-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2320-1: Oxide vulnerabilities

A use-after-free was discovered in the websockets implementation in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash. CVE-2014-3165 An issue was discovered in the Public Key Pinning...

Updated kdelibs4 packages fix security vulnerability and various bugs

This update fixes a security vulnerability in the polkit authentication backend of kdelibs CVE-2014-5033 mga13792, and fixes some additional issues: - duplicate targets in PythonMacros.cmake reviewboard kde 111371, - kded4 leak sockets in NetworkInterface::isWireless bko324954, - media type...

Fedora Update for qt-mobility FEDORA-2014-8183

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2298-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for qt FEDORA-2014-8183

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: qt-mobility-1.2.2-0.16.20140317git169da60c.fc20

Qt Mobility Project delivers a set of new APIs to Qt with features that are well known from the mobile device world, in particular phones. However, these AP Is allow the developer to use these features with ease from one framework and apply them to phones, netbooks and non-mobile personal...

[SECURITY] Fedora 20 Update: gqrx-2.2.0-6.fc20

Gqrx is a software defined radio receiver powered by the GNU Radio SDR framework and the Qt graphical toolkit...

[SECURITY] Fedora 20 Update: qmmp-0.7.7-1.fc20.1

This program is an audio-player, written with help of Qt library. The user interface is similar to winamp or xmms. Main opportunities: Winamp and xmms skins support plugins support Ogg Vorbis support native FLAC support Musepack support WavePack support ModPlug support PCM WAVE support CD Audio...

[SECURITY] Fedora 20 Update: qt5-qtmultimedia-5.3.1-1.fc20.1

The Qt Multimedia module provides a rich feature set that enables you to easily take advantage of a platforms multimedia capabilites and hardware. This ranges from the playback and recording of audio and video content to the use of available devices like cameras and radios...

[SECURITY] Fedora 20 Update: qt-4.8.6-9.fc20.1

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

USN-2298-1 oxide-qt vulnerabilities

A type confusion bug was discovered in V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code with the privileges of the sandboxed render process. CVE-2014-1730 A...

PT-2014-1805

Name of the Vulnerable Software and Affected Versions polkit-qt versions 0.103.0 kdelibs versions prior to 4.14 kauth versions prior to 5.1 Description The issue allows local users to bypass intended access restrictions, potentially leading to a violation of confidentiality, integrity, and...

Skype for Linux <= 2.1 Beta - Multiple Strange Behavior

No description provided by source. Title: Skype for Linux =2.1 Beta multiple strange behavior Author: Emanuele Gentili Emgent, Emanuele Acri Crossbower Contacts: [email protected], [email protected] Published: 2010-01-04 Software Link: http://www.skype.com/intl/it/download/skype/linux/...

Qt 4.6.3 "QSslSocketBackendPrivate::transmit()" Denial of Service

No description provided by source. Source: http://aluigi.org/adv/qtsslame-adv.txt Luigi Auriemma Application: Qt http://qt.nokia.com Versions: = 4.6.3 Platforms: Windows, Mac OS X, Linux, mobile devices Bug: QSSLsocket endless loop Exploitation: remote, versus server Date: 29 Jun 2010 Author: Lui...

QuickTicket <= 1.5 (qti_usr.php id) SQL Injection Vulnerability

No description provided by source. Script name: QuickTicket Site: http://www.qt-cute.org Vulnerability: remote sql injection at qtiusr.php Download: v 1.4: http://www.qt-cute.org/download/qti14.zip v 1.5.0.3: http://www.qt-cute.org/download/qti15.zip Vulnerable code: 1.4 ; 1.5 is pretty the same ...

PT-2015-5476

Name of the Vulnerable Software and Affected Versions Qt versions prior to 4.8.7 Qt 5.x versions prior to 5.4.2 Description The issue is related to multiple buffer overflows in the gui/image/qgifhandler.cpp file within the QtBase module. This can be triggered by remote attackers using a crafted G...

PT-2015-5474

Name of the Vulnerable Software and Affected Versions Qt versions prior to 4.8.7 Qt 5.x versions prior to 5.4.2 Description The issue is related to multiple buffer overflows in the gui/image/qbmphandler.cpp file within the QtBase module. This can be exploited by remote attackers using a crafted B...