Oval Definition:	oval:com.redhat.rhsa:def:20111328
Revision Date: 2011-09-21 Version: 638 Title: RHSA-2011:1328: qt security update (Moderate) Description: Qt is a software toolkit that simplifies the task of writing and maintaining GUI (Graphical User Interface) applications for the X Window System. HarfBuzz is an OpenType text shaping engine. A buffer overflow flaw was found in the harfbuzz module in Qt. If a user loaded a specially-crafted font file with an application linked against Qt, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2011-3193) A buffer overflow flaw was found in the way Qt handled certain gray-scale image files. If a user loaded a specially-crafted gray-scale image file with an application linked against Qt, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2011-3194) Users of Qt should upgrade to these updated packages, which contain backported patches to correct these issues. All running applications linked against Qt libraries must be restarted for this update to take effect. Family: unix Class: patch Status: Reference(s): CVE-2011-3193 CVE-2011-3193 CVE-2011-3194 CVE-2011-3194 RHSA-2011:1328 RHSA-2011:1328-01 RHSA-2011:1328-01 Platform(s): Red Hat Enterprise Linux 6 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 6 is installed AND phonon-backend-gstreamer is earlier than 1:4.6.2-20.el6 AND phonon-backend-gstreamer is signed with Red Hat redhatrelease2 key qt is earlier than 1:4.6.2-20.el6 AND qt is signed with Red Hat redhatrelease2 key qt-demos is earlier than 1:4.6.2-20.el6 AND qt-demos is signed with Red Hat redhatrelease2 key qt-devel is earlier than 1:4.6.2-20.el6 AND qt-devel is signed with Red Hat redhatrelease2 key qt-doc is earlier than 1:4.6.2-20.el6 AND qt-doc is signed with Red Hat redhatrelease2 key qt-examples is earlier than 1:4.6.2-20.el6 AND qt-examples is signed with Red Hat redhatrelease2 key qt-mysql is earlier than 1:4.6.2-20.el6 AND qt-mysql is signed with Red Hat redhatrelease2 key qt-odbc is earlier than 1:4.6.2-20.el6 AND qt-odbc is signed with Red Hat redhatrelease2 key qt-postgresql is earlier than 1:4.6.2-20.el6 AND qt-postgresql is signed with Red Hat redhatrelease2 key qt-sqlite is earlier than 1:4.6.2-20.el6 AND qt-sqlite is signed with Red Hat redhatrelease2 key qt-x11 is earlier than 1:4.6.2-20.el6 AND qt-x11 is signed with Red Hat redhatrelease2 key
BACK