[ MDKSA-2007:151 ] - Updated qt3 packages fix multiple vulnerabilities
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDKSA-2007:151
http://www.mandriva.com/security/
_______________________________________________________________________
Package : qt3
Date : August 1, 2007
Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0
_______________________________________________________________________
Problem Description:
A number of format string flaws have been discovered in how Qt handled
error messages by Dirk Mueller and Tracey Parry of Portcullis Computer
Security. If an application linked against Qt created an error
message from user-supplied data in a certain way, it could possibly
lead to the execution of arbitrary code or a denial of service.
This update provides packages which are patched to prevent these
issues.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3388
_______________________________________________________________________
Updated Packages:
Mandriva Linux 2007.0:
ce0be0c7f6a6e866476fbfd2e21ae98c
2007.0/i586/libdesignercore1-3.3.6-18.3mdv2007.0.i586.rpm
d1a44381c8f93f1b7c339f6984f7e89f
2007.0/i586/libeditor1-3.3.6-18.3mdv2007.0.i586.rpm
7b5d2c3dade2761d2cfda191b9b64007
2007.0/i586/libqassistantclient1-3.3.6-18.3mdv2007.0.i586.rpm
ef5c47cca08d8c61f49cc8f5079c9530
2007.0/i586/libqt3-3.3.6-18.3mdv2007.0.i586.rpm
1351e443eb632ae1353361960674df09
2007.0/i586/libqt3-devel-3.3.6-18.3mdv2007.0.i586.rpm
cdb6e25c831c6a80621fd1e2786a706a
2007.0/i586/libqt3-mysql-3.3.6-18.3mdv2007.0.i586.rpm
a4a03c9d3b4fb5b8bf7bbb698085b8f9
2007.0/i586/libqt3-odbc-3.3.6-18.3mdv2007.0.i586.rpm
7853e420094557482fb5258e14c8caa3
2007.0/i586/libqt3-psql-3.3.6-18.3mdv2007.0.i586.rpm
9260fc52f792e4eb3ae17edeeedad3f9
2007.0/i586/libqt3-sqlite-3.3.6-18.3mdv2007.0.i586.rpm
ad12f0dc6c5b6007c0fa326b2d853930
2007.0/i586/libqt3-static-devel-3.3.6-18.3mdv2007.0.i586.rpm
c109e982693cb1698287a80c493b3961
2007.0/i586/qt3-common-3.3.6-18.3mdv2007.0.i586.rpm
cfad56aa1c0ee5fd67d1e6c8090d1b6d
2007.0/i586/qt3-doc-3.3.6-18.3mdv2007.0.i586.rpm
0eccadc116d3918e43eb74600d60ad4f
2007.0/i586/qt3-example-3.3.6-18.3mdv2007.0.i586.rpm
2499a2bf3f69f77a4942a18068331ec4
2007.0/i586/qt3-tutorial-3.3.6-18.3mdv2007.0.i586.rpm
91aad72a3e393be4f71eacc89a304a4b 2007.0/SRPMS/qt3-3.3.6-18.3mdv2007.0.src.rpm
Mandriva Linux 2007.0/X86_64:
457642358c8514efdf92558fc047edef
2007.0/x86_64/lib64designercore1-3.3.6-18.3mdv2007.0.x86_64.rpm
1f6eeb9a0669e741ab3a5990edf25cc6
2007.0/x86_64/lib64editor1-3.3.6-18.3mdv2007.0.x86_64.rpm
5e29145fdca5ab04e94f3c205a8703d0
2007.0/x86_64/lib64qassistantclient1-3.3.6-18.3mdv2007.0.x86_64.rpm
3e0231d5db209fbc5d991ba52c1b915a
2007.0/x86_64/lib64qt3-3.3.6-18.3mdv2007.0.x86_64.rpm
2fd65d9bf31ccacd31c28d30a1a4f107
2007.0/x86_64/lib64qt3-devel-3.3.6-18.3mdv2007.0.x86_64.rpm
aa14be509decd6fa57b367b97eb60adc
2007.0/x86_64/lib64qt3-mysql-3.3.6-18.3mdv2007.0.x86_64.rpm
e6ee67759c5781ed5968c9684fd812f4
2007.0/x86_64/lib64qt3-odbc-3.3.6-18.3mdv2007.0.x86_64.rpm
7a4c368159c8ffaeb1af1b84740afaf5
2007.0/x86_64/lib64qt3-psql-3.3.6-18.3mdv2007.0.x86_64.rpm
06d81033389e0295233b5798b5cdd8cb
2007.0/x86_64/lib64qt3-sqlite-3.3.6-18.3mdv2007.0.x86_64.rpm
18ce8b51725aaf658fe01f5e4ae8ac4f
2007.0/x86_64/lib64qt3-static-devel-3.3.6-18.3mdv2007.0.x86_64.rpm
6df81bd244102ae58fb02fe82959dacc
2007.0/x86_64/qt3-common-3.3.6-18.3mdv2007.0.x86_64.rpm
640ffac5c35d861992d78c35588d307c
2007.0/x86_64/qt3-doc-3.3.6-18.3mdv2007.0.x86_64.rpm
381fe2a406bde1148e70f806eec93dc6
2007.0/x86_64/qt3-example-3.3.6-18.3mdv2007.0.x86_64.rpm
a9cc3c67b4567a291c92289287d72109
2007.0/x86_64/qt3-tutorial-3.3.6-18.3mdv2007.0.x86_64.rpm
91aad72a3e393be4f71eacc89a304a4b 2007.0/SRPMS/qt3-3.3.6-18.3mdv2007.0.src.rpm
Mandriva Linux 2007.1:
f231e74f4430c2af2d98ceea4d8a10d6
2007.1/i586/libdesignercore1-3.3.8-4.1mdv2007.1.i586.rpm
a4ef440b08c6bdd01c623d45ef8bab58
2007.1/i586/libeditor1-3.3.8-4.1mdv2007.1.i586.rpm
eaa9762ebeef32cac2c05e98322e7ac4
2007.1/i586/libqassistantclient1-3.3.8-4.1mdv2007.1.i586.rpm
1daa2c536a539407c5d223365402609f
2007.1/i586/libqt3-3.3.8-4.1mdv2007.1.i586.rpm
a9e19c1bba726c8bfe292f794c037857
2007.1/i586/libqt3-devel-3.3.8-4.1mdv2007.1.i586.rpm
1a8907d6fd1b748bed29e14d968296fb
2007.1/i586/libqt3-mysql-3.3.8-4.1mdv2007.1.i586.rpm
a8cd79d1d0da5dd44720c37c305fd38d
2007.1/i586/libqt3-odbc-3.3.8-4.1mdv2007.1.i586.rpm
3728a43c435707c1cddc5d36da39ec40
2007.1/i586/libqt3-psql-3.3.8-4.1mdv2007.1.i586.rpm
7d6804a498f307e21a3c16de14733451
2007.1/i586/libqt3-sqlite-3.3.8-4.1mdv2007.1.i586.rpm
3c60a4e503adec67a80ad3b85a94f28c
2007.1/i586/libqt3-static-devel-3.3.8-4.1mdv2007.1.i586.rpm
b0cbefd80eb6ad6491455b5890fbd15d
2007.1/i586/qt3-common-3.3.8-4.1mdv2007.1.i586.rpm
e4151b1dd7fef834fe9ddfbf261a8663
2007.1/i586/qt3-doc-3.3.8-4.1mdv2007.1.i586.rpm
745512805d0b5d9dac89fdae8809c69e
2007.1/i586/qt3-example-3.3.8-4.1mdv2007.1.i586.rpm
04b08ed74120fba9407c776cdefd43ef
2007.1/i586/qt3-tutorial-3.3.8-4.1mdv2007.1.i586.rpm
35b2281563c76e4702848971a8eb6adf 2007.1/SRPMS/qt3-3.3.8-4.1mdv2007.1.src.rpm
Mandriva Linux 2007.1/X86_64:
0f5eccb73f8d9ccd8ee2e15299500339
2007.1/x86_64/lib64designercore1-3.3.8-4.1mdv2007.1.x86_64.rpm
8b615c6a4dc8bf00ba5e501384d62497
2007.1/x86_64/lib64editor1-3.3.8-4.1mdv2007.1.x86_64.rpm
5fbb343226162f67558eac9681a1d3a7
2007.1/x86_64/lib64qassistantclient1-3.3.8-4.1mdv2007.1.x86_64.rpm
05658b8692701ff40fee19038823970f
2007.1/x86_64/lib64qt3-3.3.8-4.1mdv2007.1.x86_64.rpm
2a500d7589d2cb2a7339bdc85e309bfd
2007.1/x86_64/lib64qt3-devel-3.3.8-4.1mdv2007.1.x86_64.rpm
b8090f42b7224877ba1acdcc84438c7c
2007.1/x86_64/lib64qt3-mysql-3.3.8-4.1mdv2007.1.x86_64.rpm
5ee78ae3040a4a8820384cf719ecf671
2007.1/x86_64/lib64qt3-odbc-3.3.8-4.1mdv2007.1.x86_64.rpm
14241ab4fe05e87665820740ceb0fe7c
2007.1/x86_64/lib64qt3-psql-3.3.8-4.1mdv2007.1.x86_64.rpm
fa57b309216faa3e74b22461c11d7bb4
2007.1/x86_64/lib64qt3-sqlite-3.3.8-4.1mdv2007.1.x86_64.rpm
b4879b2f4f9ba825d3c0e03300f5770a
2007.1/x86_64/lib64qt3-static-devel-3.3.8-4.1mdv2007.1.x86_64.rpm
2567048cc93c595e9ba92831ab50f236
2007.1/x86_64/qt3-common-3.3.8-4.1mdv2007.1.x86_64.rpm
bc4dde47830027874ceed09a612f3b60
2007.1/x86_64/qt3-doc-3.3.8-4.1mdv2007.1.x86_64.rpm
00963b8232ad87bf525a44999b3b5fc8
2007.1/x86_64/qt3-example-3.3.8-4.1mdv2007.1.x86_64.rpm
95f6570b6d8f8c65c100b1967cc77e75
2007.1/x86_64/qt3-tutorial-3.3.8-4.1mdv2007.1.x86_64.rpm
35b2281563c76e4702848971a8eb6adf 2007.1/SRPMS/qt3-3.3.8-4.1mdv2007.1.src.rpm
Corporate 3.0:
1f7758f27c9c137754c3c8215e84c25a
corporate/3.0/i586/libqt3-3.2.3-19.10.C30mdk.i586.rpm
6a903a7962492bd6c6e1bc257ab63660
corporate/3.0/i586/libqt3-devel-3.2.3-19.10.C30mdk.i586.rpm
bf1d05273e423e3d212aa56433c05a59
corporate/3.0/i586/libqt3-mysql-3.2.3-19.10.C30mdk.i586.rpm
47611eaf3ffcce4646b02da86194085a
corporate/3.0/i586/libqt3-odbc-3.2.3-19.10.C30mdk.i586.rpm
b5aefe3cca08c409409e6856afc81cc9
corporate/3.0/i586/libqt3-psql-3.2.3-19.10.C30mdk.i586.rpm
d45e4a0f29a78e2438f9e35f2b20aff1
corporate/3.0/i586/qt3-common-3.2.3-19.10.C30mdk.i586.rpm
e8fb9ce91f15584b68f5e0595eb9eb2d
corporate/3.0/i586/qt3-example-3.2.3-19.10.C30mdk.i586.rpm
066138bdd08ddacb04e374d0f0e2b629
corporate/3.0/SRPMS/qt3-3.2.3-19.10.C30mdk.src.rpm
Corporate 3.0/X86_64:
3dbe8ab3bcf717dc8c26d1866cbaf910
corporate/3.0/x86_64/lib64qt3-3.2.3-19.10.C30mdk.x86_64.rpm
1007fd1df9c8da4540dcd8f9a4a7c242
corporate/3.0/x86_64/lib64qt3-devel-3.2.3-19.10.C30mdk.x86_64.rpm
c5b948b0d327cb8e425c17e32a53cef7
corporate/3.0/x86_64/lib64qt3-mysql-3.2.3-19.10.C30mdk.x86_64.rpm
94606657665adcf18caf209154723b5a
corporate/3.0/x86_64/lib64qt3-odbc-3.2.3-19.10.C30mdk.x86_64.rpm
2afa63aafcd40d2fb7407332d8c4f740
corporate/3.0/x86_64/lib64qt3-psql-3.2.3-19.10.C30mdk.x86_64.rpm
a5c11a462da1cc91950ee516c5d12c8e
corporate/3.0/x86_64/qt3-common-3.2.3-19.10.C30mdk.x86_64.rpm
cf250128fcb3b2fd479a7d93a06ef4ef
corporate/3.0/x86_64/qt3-example-3.2.3-19.10.C30mdk.x86_64.rpm
066138bdd08ddacb04e374d0f0e2b629
corporate/3.0/SRPMS/qt3-3.2.3-19.10.C30mdk.src.rpm
Corporate 4.0:
5785e1d82182fe9cd58cc6fa2a1bed9f
corporate/4.0/i586/libdesignercore1-3.3.6-1.4.20060mlcs4.i586.rpm
0b362e1e68c178ec9724d23161b944d1
corporate/4.0/i586/libeditor1-3.3.6-1.4.20060mlcs4.i586.rpm
491b686f4260d6bc0a01dbaf0993dadf
corporate/4.0/i586/libqassistantclient1-3.3.6-1.4.20060mlcs4.i586.rpm
52d1f4ed88e76298dc2fed78f5ae369f
corporate/4.0/i586/libqt3-3.3.6-1.4.20060mlcs4.i586.rpm
6f064b92df7038c3808c8aee32e54e8b
corporate/4.0/i586/libqt3-devel-3.3.6-1.4.20060mlcs4.i586.rpm
63b08845ca757bd283955aad38ba263d
corporate/4.0/i586/libqt3-mysql-3.3.6-1.4.20060mlcs4.i586.rpm
19ae9f75833a9dac2aba655e5d341ae7
corporate/4.0/i586/libqt3-odbc-3.3.6-1.4.20060mlcs4.i586.rpm
8e245edddf113347e2ede4663f3369e6
corporate/4.0/i586/libqt3-psql-3.3.6-1.4.20060mlcs4.i586.rpm
e4b61a1a6cd1bcf5a230d1f86b7fc431
corporate/4.0/i586/libqt3-sqlite-3.3.6-1.4.20060mlcs4.i586.rpm
409ea3057318a5ab1cb180631df49807
corporate/4.0/i586/libqt3-static-devel-3.3.6-1.4.20060mlcs4.i586.rpm
b58a7ea2af37c318bd131ca981e03fec
corporate/4.0/i586/qt3-common-3.3.6-1.4.20060mlcs4.i586.rpm
1f318bd8e121220c80b7a1d5bc37c6de
corporate/4.0/i586/qt3-doc-3.3.6-1.4.20060mlcs4.i586.rpm
5c7134a448ed342756e1c7a31ec9d16a
corporate/4.0/i586/qt3-example-3.3.6-1.4.20060mlcs4.i586.rpm
ede113df279e7f30256c1884d0e7a045
corporate/4.0/i586/qt3-tutorial-3.3.6-1.4.20060mlcs4.i586.rpm
1c624f6ef074be3be0ef1809f980b672
corporate/4.0/SRPMS/qt3-3.3.6-1.4.20060mlcs4.src.rpm
Corporate 4.0/X86_64:
085733e867577d48884ba41eb55d992d
corporate/4.0/x86_64/lib64designercore1-3.3.6-1.4.20060mlcs4.x86_64.rpm
57d03fc3d53110b64a19b0093c5cc6bb
corporate/4.0/x86_64/lib64editor1-3.3.6-1.4.20060mlcs4.x86_64.rpm
b6662f742d74a63a91afbd69dd6f0ad3
corporate/4.0/x86_64/lib64qassistantclient1-3.3.6-1.4.20060mlcs4.x86_64.rpm
7bb37136dae3066d8e9c3a0cbe9a5061
corporate/4.0/x86_64/lib64qt3-3.3.6-1.4.20060mlcs4.x86_64.rpm
adb51caf14d5447741d4fc2a0632c722
corporate/4.0/x86_64/lib64qt3-devel-3.3.6-1.4.20060mlcs4.x86_64.rpm
2bd0c78e38250190a985abacc71406a8
corporate/4.0/x86_64/lib64qt3-mysql-3.3.6-1.4.20060mlcs4.x86_64.rpm
33ea7ac074afee9fe41d598b1d97e37c
corporate/4.0/x86_64/lib64qt3-odbc-3.3.6-1.4.20060mlcs4.x86_64.rpm
659324555edd0e0bf30a4ca3bbd9ed14
corporate/4.0/x86_64/lib64qt3-psql-3.3.6-1.4.20060mlcs4.x86_64.rpm
55e4fa13fc3dc171f3d57d120ed5ca17
corporate/4.0/x86_64/lib64qt3-sqlite-3.3.6-1.4.20060mlcs4.x86_64.rpm
0fc343147af499022f61f2fbab5f7d03
corporate/4.0/x86_64/lib64qt3-static-devel-3.3.6-1.4.20060mlcs4.x86_64.rpm
1e3892f62ba3b6d69def7ef9e3bbbe24
corporate/4.0/x86_64/qt3-common-3.3.6-1.4.20060mlcs4.x86_64.rpm
7afeabcc5424b2f30fbff0e57e384421
corporate/4.0/x86_64/qt3-doc-3.3.6-1.4.20060mlcs4.x86_64.rpm
c91eccce209509a7dc5155866a9d63cb
corporate/4.0/x86_64/qt3-example-3.3.6-1.4.20060mlcs4.x86_64.rpm
f6d6744eb8ac82c728458bca0b22834f
corporate/4.0/x86_64/qt3-tutorial-3.3.6-1.4.20060mlcs4.x86_64.rpm
1c624f6ef074be3be0ef1809f980b672
corporate/4.0/SRPMS/qt3-3.3.6-1.4.20060mlcs4.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
iD8DBQFGsNXWmqjQ0CJFipgRAlFoAJ415aGJHr7UsILJ30TbecAKVm0OyACfSwf9
x6TncnS8p9nwC+bj83S1GRI=
=nYwu
-----END PGP SIGNATURE-----