Red Hat Security Advisory 2012-0880-04

newsbot

newsbot

RSS Feed
Red Hat Security Advisory 2012-0880-04 - Qt is a software toolkit that simplifies the task of writing and maintaining GUI applications for the X Window System. HarfBuzz is an OpenType text shaping engine. A buffer overflow flaw was found in the harfbuzz module in Qt. If a user loaded a specially-crafted font file with an application linked against Qt, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. A flaw was found in the way Qt handled X.509 certificates with IP address wildcards. An attacker able to obtain a certificate with a Common Name containing an IP wildcard could possibly use this flaw to impersonate an SSL server to client applications that are using Qt. This update also introduces more strict handling for hostname wildcard certificates by disallowing the wildcard character to match more than one hostname component.

Weiterlesen...
 

Ähnliche Themen

Nginx als Reverse Proxy für Nextcloud und Emby

Senior System & Network Admin in Berlin

Red Hat Security Advisory 2012-1590-01

Red Hat Security Advisory 2012-1361-01

Mandriva Linux Security Advisory 2012-184

Zurück
Oben