USN-1101-1: Qt vulnerabilities
1 April 2011
qt4-x11 update for fraudulent comodo certificates
- qt4-x11 - Qt 4 core non-GUI functionality runtime library
It was discovered that several invalid HTTPS certificates were issued and
revoked. An attacker could exploit these to perform a machine-in-the-middle
attack to view sensitive information or alter encrypted communications.
These were placed on the certificate blocklist to prevent their misuse.
The problem can be corrected by updating your system to the following package versions:
After a standard system upgrade you need to restart your session to effect
the necessary changes.