Linux vendors react to Qt flaw

[Nomad559]

Qt flaw

-Snip-

Several Linux vendors have issued patches for a serious vulnerability in the widely-used Qt library, which could allow an attacker to take control of a system.

Since late last week, Red Hat, the Gentoo Foundation, Novell's SuSE and MandrakeSoft have all begun distributing updated Qt packages fixing the problem.

The flaw is in Qt, a software toolkit used in writing graphical user interface applications using the X Window system in Unix and Linux.

Security researcher, Chris Evans, discovered a bug in the part of the Qt library which decodes bitmap (BMP) image files: an attacker could use a specially-crafted bitmap file to crash any application using the Qt BMP decoder, potentially also executing malicious code. The bug affects Qt versions earlier than 3.3.3, according to researchers.

---------------------------------------------------------------------

Todays Security Advisories

http://secunia.com

[Briarius]

1. Thanks for this

I'm going to check on this now...

[Tandalayo_Scheisskopf]

2. Already got mine.

Not that big a deal, really. Just get the upgrade.