4

USN-829-1: Qt vulnerability

view full story
linux-howto

http://www.ubuntu.com – Referenced CVEs:  CVE-2009-2700 Description:  =========================================================== Ubuntu Security Notice USN-829-1 September 10, 2009 qt4-x11 vulnerability CVE-2009-2700 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS Ubuntu 8.10 Ubuntu 9.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 8.04 LTS: libqt4-core 4.3.4-0ubuntu3.1 Ubuntu 8.10: libqt4-network 4.4.3-0ubuntu1.3 Ubuntu 9.04: libqt4-network 4.5.0-0ubuntu4.2 After a standard system upgrade you need to restart your session to effect the necessary changes. Details follow: It was discovered that Qt did not properly handle certificates with NULL characters in the Subject Alternative Name field of X.509 certificates. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. (CVE-2009-2700) (Distributions)

Edward.H's picture
Submitted by Edward.H on 09/11/2009 – Made popular on 09/11/2009

Stories similar to USN-829-1: Qt vulnerability

Referenced CVEs: 

CVE-2009-2702

Description: 

=========================================================== Ubuntu Security Notice USN-833-1 September 18, 2009 kde4libs, kdelibs vulnerability CVE-2009-2702 ===========================================================

A securi

Referenced CVEs: 

CVE-2009-2666

Description: 

=========================================================== Ubuntu Security Notice USN-816-1 August 12, 2009 fetchmail vulnerability CVE-2009-2666 ===========================================================

A security issue

Referenced CVEs: 

CVE-2009-3767

Description: 

=========================================================== Ubuntu Security Notice USN-858-1 November 12, 2009 openldap2.2 vulnerability CVE-2009-3767 ===========================================================

A security issu

USN-842-1: Wget vulnerability 3 years 32 weeks ago

Referenced CVEs: 

CVE-2009-3490

Description: 

=========================================================== Ubuntu Security Notice USN-842-1 October 06, 2009 wget vulnerability CVE-2009-3490 ===========================================================

A security issue affec

USN-818-1: curl vulnerability 3 years 39 weeks ago

Referenced CVEs: 

CVE-2009-2417

Description: 

=========================================================== Ubuntu Security Notice USN-818-1 August 17, 2009 curl vulnerability CVE-2009-2417 ===========================================================

A security issue affe

Referenced CVEs: 

CVE-2009-4034, CVE-2009-4136

Description: 

=========================================================== Ubuntu Security Notice USN-876-1 January 03, 2010 postgresql-8.1, postgresql-8.3, postgresql-8.4 vulnerabilities CVE-2009-4034, CVE-2009-4136 ========

USN-810-1: NSS vulnerabilities 3 years 41 weeks ago

Referenced CVEs: 

CVE-2009-2404, CVE-2009-2408, CVE-2009-2409

Description: 

=========================================================== Ubuntu Security Notice USN-810-1 August 04, 2009 nss vulnerabilities CVE-2009-2404, CVE-2009-2408, CVE-2009-2409 =====================

USN-835-1: neon vulnerabilities 3 years 34 weeks ago

Referenced CVEs: 

CVE-2008-3746, CVE-2009-2474

Description: 

=========================================================== Ubuntu Security Notice USN-835-1 September 21, 2009 neon, neon27 vulnerabilities CVE-2008-3746, CVE-2009-2474 ==========================================

Referenced CVEs: 

CVE-2009-3111

Description: 

=========================================================== Ubuntu Security Notice USN-832-1 September 16, 2009 freeradius vulnerability CVE-2009-3111 ===========================================================

A security issue