Oval Definition:oval:com.redhat.rhsa:def:20111323
Revision Date:2011-09-21Version:640
Title:RHSA-2011:1323: qt security update (Moderate)
Description:Qt is a software toolkit that simplifies the task of writing and maintaining GUI (Graphical User Interface) applications for the X Window System. HarfBuzz is an OpenType text shaping engine.

  • A buffer overflow flaw was found in the harfbuzz module in Qt. If a user loaded a specially-crafted font file with an application linked against Qt, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2011-3193)

  • A buffer overflow flaw was found in the way Qt handled certain gray-scale image files. If a user loaded a specially-crafted gray-scale image file with an application linked against Qt, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2011-3194)

    Users of Qt should upgrade to these updated packages, which contain backported patches to correct these issues. All running applications linked against Qt libraries must be restarted for this update to take effect.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2011-3193
    CVE-2011-3193
    CVE-2011-3194
    CVE-2011-3194
    RHSA-2011:1323
    RHSA-2011:1323-01
    RHSA-2011:1323-01
    Platform(s):Red Hat Enterprise Linux 6
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 6 is installed
  • AND
  • phonon-backend-gstreamer is earlier than 1:4.6.2-17.el6_1.1
  • AND phonon-backend-gstreamer is signed with Red Hat redhatrelease2 key
  • qt is earlier than 1:4.6.2-17.el6_1.1
  • AND qt is signed with Red Hat redhatrelease2 key
  • qt-demos is earlier than 1:4.6.2-17.el6_1.1
  • AND qt-demos is signed with Red Hat redhatrelease2 key
  • qt-devel is earlier than 1:4.6.2-17.el6_1.1
  • AND qt-devel is signed with Red Hat redhatrelease2 key
  • qt-doc is earlier than 1:4.6.2-17.el6_1.1
  • AND qt-doc is signed with Red Hat redhatrelease2 key
  • qt-examples is earlier than 1:4.6.2-17.el6_1.1
  • AND qt-examples is signed with Red Hat redhatrelease2 key
  • qt-mysql is earlier than 1:4.6.2-17.el6_1.1
  • AND qt-mysql is signed with Red Hat redhatrelease2 key
  • qt-odbc is earlier than 1:4.6.2-17.el6_1.1
  • AND qt-odbc is signed with Red Hat redhatrelease2 key
  • qt-postgresql is earlier than 1:4.6.2-17.el6_1.1
  • AND qt-postgresql is signed with Red Hat redhatrelease2 key
  • qt-sqlite is earlier than 1:4.6.2-17.el6_1.1
  • AND qt-sqlite is signed with Red Hat redhatrelease2 key
  • qt-x11 is earlier than 1:4.6.2-17.el6_1.1
  • AND qt-x11 is signed with Red Hat redhatrelease2 key
  • BACK