USN-1101-1: Qt vulnerabilities

Releases

• Ubuntu 10.10
• Ubuntu 10.04
• Ubuntu 9.10
• Ubuntu 8.04

Packages

• qt4-x11 - Qt 4 core non-GUI functionality runtime library

Details

It was discovered that several invalid HTTPS certificates were issued and
revoked. An attacker could exploit these to perform a machine-in-the-middle
attack to view sensitive information or alter encrypted communications.
These were placed on the certificate blocklist to prevent their misuse.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 9.10

• libqt4-network - 4.5.3really4.5.2-0ubuntu1.1

Ubuntu 8.04

• libqt4-core - 4.3.4-0ubuntu3.2

Ubuntu 10.10

• libqt4-network - 4:4.7.0-0ubuntu4.3

Ubuntu 10.04

• libqt4-network - 4:4.6.2-0ubuntu5.2

After a standard system upgrade you need to restart your session to effect
the necessary changes.

References

• https://launchpad.net/bugs/742377