USN-579-1: Qt vulnerability

Releases

• Ubuntu 7.10

Packages

• qt4-x11 -

Details

It was discovered that QSslSocket did not properly verify SSL
certificates. A remote attacker may be able to trick applications
using QSslSocket into accepting invalid SSL certificates.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 7.10

• libqt4-core - 4.3.2-0ubuntu3.2

After a standard system upgrade you need to restart applications
linked against Qt to effect the necessary changes.

References

• CVE-2007-5965