[SECURITY] Fedora 12 Update: qt-4.6.3-8.fc12
updates at fedoraproject.org
updates at fedoraproject.org
Tue Jul 13 07:43:47 UTC 2010
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-11020
2010-07-13 06:44:53
--------------------------------------------------------------------------------
Name : qt
Product : Fedora 12
Version : 4.6.3
Release : 8.fc12
URL : http://www.qtsoftware.com/
Summary : Qt toolkit
Description :
Qt is a software toolkit for developing applications.
This package contains base tools, like string, xml, and network
handling.
--------------------------------------------------------------------------------
Update Information:
This is an update to the latest stable bugfix qt release, including several
security fixes related to qtwebkit. For details, see also:
http://qt.nokia.com/about/news/nokia-releases-qt-4.6.3
http://qt.nokia.com/developer/changes/changes-4.6.3
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 1 2010 Kevin Kofler <Kevin at tigcc.ticalc.org> - 4.6.3-8
- use find_lang to package the qm files (#609749)
- put the qm files into the correct subpackages
- remove qvfb translations, we don't ship qvfb
* Tue Jun 29 2010 Rex Dieter <rdieter at fedoraproject.org> - 4.6.3-7
- workaround glib_eventloop crasher induced by gdal/grass (bug #498111)
* Sun Jun 20 2010 Rex Dieter <rdieter at fedoraproject.org> - 4.6.3-5
- avoid timestamps in uic-generated files to be multilib-friendly
* Fri Jun 18 2010 Rex Dieter <rdieter at fedoraproject.org> - 4.6.3-4
- QtWebKit does not search correct plugin path(s) (#568860)
- QtWebKit browsers crash with flash-plugin (rh#605677,webkit#40567)
* Tue Jun 15 2010 Jaroslav Reznik <jreznik at redhat.com> - 4.6.3-3
- WebKit security update:
CVE-2010-1119, CVE-2010-1400, CVE-2010-1778
* Fri Jun 11 2010 Jaroslav Reznik <jreznik at redhat.com> - 4.6.3-2
- WebKit security update:
CVE-2010-1303_1304, CVE-2010-1392, CVE-2010-1396, CVE-2010-1397,
CVE-2010-1398, CVE-2010-1412, CVE-2010-1770,
CVE-2010-1773, CVE-2010-1774
* Tue Jun 8 2010 Than Ngo <than at redhat.com> - 4.6.3-1
- 4.6.3
* Thu May 27 2010 Rex Dieter <rdieter at fedoraproject.org> - 4.6.2-20
- Unsafe use of rand() in X11 (QTBUG-9793)
* Mon May 17 2010 Rex Dieter <rdieter at fedoraproject.org> - 4.6.2-19
- support QT_GRAPHICSSYSTEM env
* Thu May 6 2010 Rex Dieter <rdieter at fedoraproject.org> - 4.6.2-18
- +Provides: qt4-webkit(-devel)
* Thu May 6 2010 Than Ngo <than at redhat.com> - 4.6.2-17
- bz#589169, fix multiple flaws in webkit
CVE-2010-0047, CVE-2010-0648, CVE-2010-0656
* Thu Apr 29 2010 Kevin Kofler <Kevin at tigcc.ticalc.org> - 4.6.2-16
- restore qt-everywhere-opensource-src-4.6.2-cups.patch (#586725)
* Wed Apr 28 2010 Rex Dieter <rdieter at fedoraproject.org> - 4.6.2-15
- own %{_qt4_plugindir}/crypto
* Thu Apr 15 2010 Than Ngo <than at redhat.com> - 4.6.2-14
- backport from 4.7 branch to get the printDialog to check
for default paperSize via CUPS, it replaces the patch
qt-everywhere-opensource-src-4.6.2-cups.patch
* Tue Apr 6 2010 Than Ngo <than at redhat.com> - 4.6.2-13
- backport from 4.7 branch to fix s390(x) atomic ops crashes
* Fri Apr 2 2010 Rex Dieter <rdieter at fedoraproject.org> - 4.6.2-12
- Associate text/vnd.trolltech.linguist with linguist (#579082)
* Tue Mar 23 2010 Tom "spot" Callaway <tcallawa at redhat.com> - 4.6.2-11
- fix type cast issue on sparc64
- drop "recreate .qm file", it's not needed anymore
* Tue Mar 23 2010 Than Ngo <than at redhat.com> - 4.6.2-10
- fix type cast issue on s390x
* Mon Mar 22 2010 Than Ngo <than at redhat.com> - 4.6.2-9
- backport patch to fix a crash when reparenting an item
in QGraphicsView, QTBUG-6932
- drop dangling reference(s) to %buildroot in *.pc
* Wed Mar 17 2010 Jaroslav Reznik <jreznik at redhat.com> - 4.6.2-8
- WebKit security update:
CVE-2010-0046, CVE-2010-0049, CVE-2010-0050, CVE-2010-0051,
CVE-2010-0052, CVE-2010-0054
* Sat Mar 13 2010 Kevin Kofler <Kevin at tigcc.ticalc.org> - 4.6.2-7
- BR alsa-lib-devel (for QtMultimedia)
* Sat Mar 13 2010 Kevin Kofler <Kevin at tigcc.ticalc.org> - 4.6.2-6
- Provides: qt-assistant-adp(-devel)
* Fri Mar 5 2010 Than Ngo <than at redhat.com> - 4.6.2-5
- Make tablet detection work with new wacom drivers (#569132)
* Mon Mar 1 2010 Rex Dieter <rdieter at fedoraproject.org> - 4.6.2-4
- fix 64bit platform logic, use linux-g++-64 everywhere except x86_64 (#569542)
* Sun Feb 28 2010 Kevin Kofler <Kevin at tigcc.ticalc.org> - 4.6.2-3
- fix CUPS patch not to crash if currentPPD is NULL (#566304)
* Tue Feb 16 2010 Rex Dieter <rdieter at fedoraproject.org> - 4.6.2-2
- macros.qt4: s/qt45/qt46/
* Mon Feb 15 2010 Rex Dieter <rdieter at fedoraproject.org> - 4.6.2-1
- 4.6.2
* Fri Feb 5 2010 Rex Dieter <rdieter at fedoraproject.org> - 4.6.1-3
- improve cups support (#523846, kde#180051#c22)
* Tue Jan 19 2010 Rex Dieter <rdieter at fedoraproject.org> - 4.6.1-2
- drop bitmap_font_speed patch, rejected upstream
* Tue Jan 19 2010 Than Ngo <than at redhat.com> - 4.6.1-1
- 4.6.1
* Mon Jan 11 2010 Rex Dieter <rdieter at fedoraproject.org> - 4.6.0-5
- bitmap_font_speed patch (QTBUG-7255)
* Sat Jan 9 2010 Rex Dieter <rdieter at fedoraproject.org> - 4.6.0-4
- Fix crash when QGraphicsItem destructor deletes other QGraphicsItem (kde-qt cec34b01)
- Fix a crash in KDE/Plasma with QGraphicsView. TopLevel list of items (kde-qt 63839f0c)
* Wed Dec 23 2009 Kevin Kofler <Kevin at tigcc.ticalc.org> - 4.6.0-3
- disable QtWebKit JavaScript JIT again, incompatible with SELinux (#549994)
* Sat Dec 5 2009 Kevin Kofler <Kevin at tigcc.ticalc.org> - 4.6.0-2
- own %{_qt4_plugindir}/gui_platform
* Tue Dec 1 2009 Than Ngo <than at redhat.com> - 4.6.0-1
- 4.6.0
* Tue Nov 17 2009 Rex Dieter <rdieter at fedoraproject.org> - 4.6.0-0.6.rc1
- qt-4.6.0-rc1
* Sat Nov 14 2009 Rex Dieter <rdieter at fedoraproject.org> - 4.6.0-0.5.beta1
- -tds: Add package with TDS sqldriver (#537586)
- add arch'd provides for sql drivers
* Sun Nov 8 2009 Rex Dieter <rdieter at fedoraproject.org> - 4.6.0-0.4.beta1
- -x11: Requires: %{name}-sqlite(ppc-32)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #525791 - CVE-2009-2841 WebKit, qt: Unallowed sub-resources loading in the media element handling code
https://bugzilla.redhat.com/show_bug.cgi?id=525791
[ 2 ] Bug #596494 - CVE-2010-1766 WebKit: off-by-one memory corruption flaw WebSocketHandshake::readServerHandshake()
https://bugzilla.redhat.com/show_bug.cgi?id=596494
[ 3 ] Bug #596498 - CVE-2010-1772 WebKit: use-after-free vulnerability in handling of geolocation events
https://bugzilla.redhat.com/show_bug.cgi?id=596498
[ 4 ] Bug #596500 - CVE-2010-1773 WebKit: off-by-one memory read out of bounds vulnerability in handling of HTML lists
https://bugzilla.redhat.com/show_bug.cgi?id=596500
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
More information about the package-announce
mailing list