Test ID:	1.3.6.1.4.1.25623.1.0.122084
Category:	Oracle Linux Local Security Checks
Title:	Oracle: Security Advisory (ELSA-2011-1324)
Summary:	The remote host is missing an update for the 'qt4' package(s) announced via the ELSA-2011-1324 advisory.
Description:	Summary: The remote host is missing an update for the 'qt4' package(s) announced via the ELSA-2011-1324 advisory. Vulnerability Insight: [4.2.1-1.1] - Resolves: #737815, qt/harfbuzz buffer overflow, CVE-2011-3193 - Resolves: #234633, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242 Affected Software/OS: 'qt4' package(s) on Oracle Linux 5. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-0242 BugTraq ID: 23269 http://www.securityfocus.com/bid/23269 Debian Security Information: DSA-1292 (Google Search) http://www.debian.org/security/2007/dsa-1292 http://fedoranews.org/updates/FEDORA-2007-703.shtml http://www.mandriva.com/security/advisories?name=MDKSA-2007:074 http://www.mandriva.com/security/advisories?name=MDKSA-2007:075 http://www.mandriva.com/security/advisories?name=MDKSA-2007:076 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11510 http://www.redhat.com/support/errata/RHSA-2007-0883.html http://www.redhat.com/support/errata/RHSA-2007-0909.html RedHat Security Advisories: RHSA-2011:1324 http://rhn.redhat.com/errata/RHSA-2011-1324.html http://secunia.com/advisories/24699 http://secunia.com/advisories/24705 http://secunia.com/advisories/24726 http://secunia.com/advisories/24727 http://secunia.com/advisories/24759 http://secunia.com/advisories/24797 http://secunia.com/advisories/24847 http://secunia.com/advisories/24889 http://secunia.com/advisories/25263 http://secunia.com/advisories/26804 http://secunia.com/advisories/26857 http://secunia.com/advisories/27108 http://secunia.com/advisories/27275 http://secunia.com/advisories/46117 SGI Security Advisory: 20070901-01-P ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.348591 SuSE Security Announcement: SUSE-SR:2007:006 (Google Search) http://www.novell.com/linux/security/advisories/2007_6_sr.html http://www.ubuntu.com/usn/usn-452-1 http://www.vupen.com/english/advisories/2007/1212 XForce ISS Database: qt-utf8-xss(33397) https://exchange.xforce.ibmcloud.com/vulnerabilities/33397 Common Vulnerability Exposure (CVE) ID: CVE-2011-3193 41537 http://secunia.com/advisories/41537 46117 46118 http://secunia.com/advisories/46118 46119 http://secunia.com/advisories/46119 46128 http://secunia.com/advisories/46128 46371 http://secunia.com/advisories/46371 46410 http://secunia.com/advisories/46410 49723 http://www.securityfocus.com/bid/49723 49895 http://secunia.com/advisories/49895 75652 http://www.osvdb.org/75652 RHSA-2011:1323 http://rhn.redhat.com/errata/RHSA-2011-1323.html RHSA-2011:1324 RHSA-2011:1325 http://rhn.redhat.com/errata/RHSA-2011-1325.html RHSA-2011:1326 http://rhn.redhat.com/errata/RHSA-2011-1326.html RHSA-2011:1327 http://rhn.redhat.com/errata/RHSA-2011-1327.html RHSA-2011:1328 http://rhn.redhat.com/errata/RHSA-2011-1328.html SUSE-SU-2011:1113 https://hermes.opensuse.org/messages/12056605 USN-1504-1 http://www.ubuntu.com/usn/USN-1504-1 [oss-security] 20120822 CVE request: libqt4: two memory issues http://www.openwall.com/lists/oss-security/2011/08/22/6 [oss-security] 20120824 Re: CVE request: libqt4: two memory issues http://www.openwall.com/lists/oss-security/2011/08/24/8 [oss-security] 20120825 Re: CVE request: libqt4: two memory issues http://www.openwall.com/lists/oss-security/2011/08/25/1 http://cgit.freedesktop.org/harfbuzz.old/commit/?id=81c8ef785b079980ad5b46be4fe7c7bf156dbf65 http://cgit.freedesktop.org/harfbuzz/commit/src/harfbuzz-gpos.c?id=da2c52abcd75d46929b34cad55c4fb2c8892bc08 http://git.gnome.org/browse/pango/commit/pango/opentype/harfbuzz-gpos.c?id=a7a715480db66148b1f487528887508a7991dcd0 https://qt.gitorious.org/qt/qt/commit/9ae6f2f9a57f0c3096d5785913e437953fa6775c openSUSE-SU-2011:1119 http://lists.opensuse.org/opensuse-updates/2011-10/msg00007.html openSUSE-SU-2011:1120 http://lists.opensuse.org/opensuse-updates/2011-10/msg00008.html pango-harfbuzz-bo(69991) https://exchange.xforce.ibmcloud.com/vulnerabilities/69991
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.