Home
Reading
Searching
Subscribe
Sponsors
Statistics
Posting
Contact
Spam
Lists
Links
About
Hosting
Filtering
Features Download
Marketing
Archives
FAQ
Blog
 
Gmane
From: <updates <at> fedoraproject.org>
Subject: [SECURITY] Fedora 17 Update: qt-4.8.4-11.fc17
Newsgroups: gmane.linux.redhat.fedora.package.announce
Date: Sunday 24th February 2013 08:52:38 UTC (over 3 years ago)
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-1997
2013-02-08 01:05:15
--------------------------------------------------------------------------------

Name        : qt
Product     : Fedora 17
Version     : 4.8.4
Release     : 11.fc17
URL         : http://qt.nokia.com/
Summary     : Qt toolkit
Description :
Qt is a software toolkit for developing applications.

This package contains base tools, like string, xml, and network
handling.

--------------------------------------------------------------------------------
Update Information:

it fixes security flaw was found in the way QSharedMemory class,
CVE-2013-0254
--------------------------------------------------------------------------------
ChangeLog:

* Mon Feb  4 2013 Than Ngo  - 4.8.4-11
- backport: fix security flaw was found in the way QSharedMemory class,
CVE-2013-0254
* Sat Jan 26 2013 Rex Dieter  1:4.8.4-10
- rebuild (icu)
* Thu Jan 24 2013 Rex Dieter  1:4.8.4-9
- make qtchooser support non-conflicting
* Mon Jan 21 2013 Adam Tkac  - 1:4.8.4-8
- rebuild due to "jpeg8-ABI" feature drop
* Wed Jan  9 2013 Rex Dieter  4.8.4-7
- add qtchooser support (disabled by default)
* Mon Jan  7 2013 Rex Dieter  4.8.4-6
- blacklist unauthorized SSL certificates by T├╝rktrust
* Fri Jan  4 2013 Rex Dieter  1:4.8.4-5
- QGtkStyle was unable to detect the current GTK+ theme (#702493,
QTBUG-5545))
* Fri Jan  4 2013 Rex Dieter  1:4.8.4-4
- QSslSocket may report incorrect errors when certificate verification
fails
* Thu Jan  3 2013 Rex Dieter  1:4.8.4-3
- -x11: %exclude %{_qt4_plugindir}/designer/libqwebview.so
* Sun Dec 16 2012 Rex Dieter  1:4.8.4-2
- -designer-plugin-webkit subpkg (#887501)
- fix/prune/changelog
* Thu Nov 29 2012 Rex Dieter  1:4.8.4-1
- 4.8.4
* Wed Oct 31 2012 Than Ngo  - 1:4.8.3-8
- add poll support to fix QAbstractSocket errors with more than
  1024 file descriptors, thanks Florian for the patch
* Wed Oct 24 2012 Rex Dieter  1:4.8.3-7
- Crash in Qt script (QTBUG-27322)
* Tue Oct 23 2012 Rex Dieter  1:4.8.3-6
- fix/respin qdevice_pri patch
* Mon Oct 22 2012 Rex Dieter  1:4.8.3-5
- QDir::homePath() should account for an empty $HOME (QTBUG-4862,
kde#249217, #694385)
* Sat Oct 20 2012 Rex Dieter  1:4.8.3-4
- $RPM_LD_FLAGS should be propagated to qmake's defaults (#868554)
* Fri Sep 28 2012 Rex Dieter  1:4.8.3-3
- find qdevice.pri even for installed qt builds
* Thu Sep 27 2012 Rex Dieter  1:4.8.3-2
- upstream disable-SSL-compression patch
* Thu Sep 13 2012 Rex Dieter  - 1:4.8.3-1
- qt-4.8.3 final
- revert QtScript-JIT commit
* Tue Sep  4 2012 Rex Dieter  4.8.2-6
- revert "fix QtScript JIT crash" patch, causes frequent segmentation
faults (#853587)
* Mon Aug 13 2012 Rex Dieter  4.8.2-5
- fix QtScript JIT crash (QTBUG-23871, kde#297661)
* Thu Jul  5 2012 Rex Dieter  4.8.2-4
- text cursor blinks not in the current cell (kde#296490)
* Tue Jun 19 2012 Than Ngo  - 4.8.2-3
- fix bz#810500, fix crash in assistant
* Tue May 29 2012 Than Ngo  - 4.8.2-2
- fix bz#820767, lrelease-qt4 tries to run qmake not qmake-qt4
* Tue May 22 2012 Than Ngo  - 4.8.2-1
- 4.8.2
* Fri May 18 2012 Than Ngo  - 4.8.1-15
- add rhel/fedora condition
* Thu May 17 2012 Rex Dieter  4.8.1-14
- Can't build 32bit Qt release application on 64bit (#822710)
* Wed May 16 2012 Than Ngo  - 4.8.1-13
- add upstream patch to fix crash on big endian machine
* Fri May 11 2012 Rex Dieter  4.8.1-12
- enable debuginfo in libQt3Support
* Fri May 11 2012 Rex Dieter  4.8.1-11
- lrelease-qt4 tries to run qmake not qmake-qt4 (#820767)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #907425 - CVE-2013-0254 qt: QSharedMemory class created shared
memory segments with insecure permissions
        https://bugzilla.redhat.com/show_bug.cgi?id=907425
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update qt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on
the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
[email protected]
https://admin.fedoraproject.org/mailman/listinfo/package-announce
 
CD: 22ms