[SECURITY] Fedora 16 Update: qt-4.8.0-7.fc16
updates at fedoraproject.org
updates at fedoraproject.org
Sun Jan 22 22:52:00 UTC 2012
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0523
2012-01-14 03:40:21
--------------------------------------------------------------------------------
Name : qt
Product : Fedora 16
Version : 4.8.0
Release : 7.fc16
URL : http://qt.nokia.com/
Summary : Qt toolkit
Description :
Qt is a software toolkit for developing applications.
This package contains base tools, like string, xml, and network
handling.
--------------------------------------------------------------------------------
Update Information:
This build addresses a security issue:
* CVE-2011-3922 qt: Stack-based buffer overflow in embedded harfbuzz code
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 10 2012 Rex Dieter <rdieter at fedoraproject.org> 4.8.0-7
- improved filter_event patch (kde#275469)
* Mon Jan 9 2012 Than Ngo <than at redhat.com> - 4.8.0-6
- bz#772128, CVE-2011-3922, Stack-based buffer overflow in embedded harfbuzz code
* Tue Dec 27 2011 Rex Dieter <rdieter at fedoraproject.org> 4.8.0-5
- fix qvfb
* Tue Dec 27 2011 Rex Dieter <rdieter at fedoraproject.org> 4.8.0-4
- filter event patch, avoid "ghost entries in kde taskbar" problem (kde#275469)
* Tue Dec 20 2011 Rex Dieter <rdieter at fedoraproject.org> 4.8.0-3
- don't spam if libicu is not present at runtime (#759923)
* Mon Dec 19 2011 Dan HorĂ¡k <dan[at]dannu.cz> 4.8.0-2
- add missing method for QBasicAtomicPointer on s390(x)
* Thu Dec 15 2011 Jaroslav Reznik <jreznik at redhat.com> 4.8.0-1
- 4.8.0
* Mon Dec 12 2011 Jaroslav Reznik <jreznik at redhat.com> 4.8.0-0.29.rc1
- Fixes the position of misplaced mouse input (QTBUG-22420)
* Sun Dec 4 2011 Rex Dieter <rdieter at fedoraproject.org> 4.8.0-0.28.rc1
- Control whether icu support is built (#759923)
* Sat Dec 3 2011 Kevin Kofler <Kevin at tigcc.ticalc.org> 4.8.0-0.27.rc1
- work around a MOC issue with Boost 1.48 headers (#756395)
* Wed Nov 30 2011 Than Ngo <than at redhat.com> - 4.8.0-0.26.rc1
- workaround crash on ppc64
* Mon Nov 14 2011 Rex Dieter <rdieter at fedoraproject.org> 4.8.0-0.25.rc1
- BuildRequires: pkgconfig(libpng)
- -devel: drop Requires: libpng-devel libjpeg-devel
- qt4.macros: +%_qt4_epoch, %_qt4_evr
* Thu Nov 3 2011 Rex Dieter <rdieter at fedoraproject.org> 4.8.0-0.24.rc1
- build tds sql driver with -fno-strict-aliasing
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #772128 - CVE-2011-3922 qt: Stack-based buffer overflow in embedded harfbuzz code [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=772128
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
More information about the package-announce
mailing list