Foresight Linux Essential Announcement Service
06/08/07, 22:43
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Foresight Linux Essential Advisory: 2007-0042-1
Published: 2007-08-03
Rating: Moderate
Updated Versions:
qt=/conary.rpath.com@rpl:devel//foresight.rpath.org@fl:1-devel//1/3.3.8_r653471-0.2-1
group-dist=/foresight.rpath.org@fl:1-devel//1/1.3.2-0.7-5
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3388
https://issues.rpath.com/browse/RPL-1597
Description:
Previous versions of the qt package are vulnerable to user-assisted
format-string attacks, possibly leading to arbitrary code execution in
applications that use the QTextEdit widget.
Note that while Foresight ships qt for compatibility with third-party
applications, Foresight Linux does not include any components which use qt,
so a default install is not exposed to this issue.
- ---
Copyright 2007 Foresight Linux Project
This file is distributed under the terms of the MIT License.
A copy is available at http://www.foresightlinux.org/permanent/mit-license.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (GNU/Linux)
iQIVAwUBRrN9T9fwEn07iAtZAQLt8A//b51gbd6pWS2ahCaTc8RdQTDSOHrcflx0
eDb+o0u7aNnwX9A5s1Vo4vciW3uCWf2MZBaiCLQ856RhOmRq+9 CFvh6rc2pz2bhH
3sA3sL1DLPqkRuKLGx/ajFSdlrxCwoRUXcB6h4wVCmPJI5SK3cLehFrRyHbB6AY/
7jU6SnH2lJt6bm13RLHLD+q919FT8uA7lZFvPSKh5QyaXjG5F6 Y4K86aF9elArn9
TVTvMWQaeCQktxhFDA3eJtGNE/5cu0p/nQF4D5I3XbncBgaNtrha5YSzfpYOy1M1
xSeAOUkXnkWv+lKhezqD+SeCL+zgzQjx8pjtjZi3ysXxWzrXnI z7Od41GqWvsEBk
rHk2oRGKKCmt8obvEtp0kB7jviJ2NVk0LOZNTGL+jU07EMCpJy PsK8SbtpW4TZUF
LHp1i6qiqU882DvwKIwxhKBj1qtiduhcWrRCsnxemMv/7P0N4XaRIAAkNHYYgwOW
eGbjG1medzeeHOXKQeqgcoERFPm6CJ0//R7vtPHJCLZfBBGLQ65lB6JS2KIw2vSd
krvDPlD8uoLYLsOd+OzC3nfUjmWvLiEM2UaxCQpcZwRWQy0PAV lA+jdQOrhjTgDx
v4ZrGQaOeKE841hFKYnOxv9KRfoaQQVrtn4Yvbouo6gbSOUYxm Hm1pNCLy3I4szz
M6zK/5R1OUg=
=LBqs
-----END PGP SIGNATURE-----
Hash: SHA1
Foresight Linux Essential Advisory: 2007-0042-1
Published: 2007-08-03
Rating: Moderate
Updated Versions:
qt=/conary.rpath.com@rpl:devel//foresight.rpath.org@fl:1-devel//1/3.3.8_r653471-0.2-1
group-dist=/foresight.rpath.org@fl:1-devel//1/1.3.2-0.7-5
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3388
https://issues.rpath.com/browse/RPL-1597
Description:
Previous versions of the qt package are vulnerable to user-assisted
format-string attacks, possibly leading to arbitrary code execution in
applications that use the QTextEdit widget.
Note that while Foresight ships qt for compatibility with third-party
applications, Foresight Linux does not include any components which use qt,
so a default install is not exposed to this issue.
- ---
Copyright 2007 Foresight Linux Project
This file is distributed under the terms of the MIT License.
A copy is available at http://www.foresightlinux.org/permanent/mit-license.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (GNU/Linux)
iQIVAwUBRrN9T9fwEn07iAtZAQLt8A//b51gbd6pWS2ahCaTc8RdQTDSOHrcflx0
eDb+o0u7aNnwX9A5s1Vo4vciW3uCWf2MZBaiCLQ856RhOmRq+9 CFvh6rc2pz2bhH
3sA3sL1DLPqkRuKLGx/ajFSdlrxCwoRUXcB6h4wVCmPJI5SK3cLehFrRyHbB6AY/
7jU6SnH2lJt6bm13RLHLD+q919FT8uA7lZFvPSKh5QyaXjG5F6 Y4K86aF9elArn9
TVTvMWQaeCQktxhFDA3eJtGNE/5cu0p/nQF4D5I3XbncBgaNtrha5YSzfpYOy1M1
xSeAOUkXnkWv+lKhezqD+SeCL+zgzQjx8pjtjZi3ysXxWzrXnI z7Od41GqWvsEBk
rHk2oRGKKCmt8obvEtp0kB7jviJ2NVk0LOZNTGL+jU07EMCpJy PsK8SbtpW4TZUF
LHp1i6qiqU882DvwKIwxhKBj1qtiduhcWrRCsnxemMv/7P0N4XaRIAAkNHYYgwOW
eGbjG1medzeeHOXKQeqgcoERFPm6CJ0//R7vtPHJCLZfBBGLQ65lB6JS2KIw2vSd
krvDPlD8uoLYLsOd+OzC3nfUjmWvLiEM2UaxCQpcZwRWQy0PAV lA+jdQOrhjTgDx
v4ZrGQaOeKE841hFKYnOxv9KRfoaQQVrtn4Yvbouo6gbSOUYxm Hm1pNCLy3I4szz
M6zK/5R1OUg=
=LBqs
-----END PGP SIGNATURE-----