This is a multi-part message in MIME format...

------------=_1202449567-4794-9834


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________
 
 Mandriva Linux Security Advisory                         MDVSA-2008:042
 http://www.mandriva.com/security/
 _______________________________________________________________________
 
 Package : qt4
 Date    : February 7, 2008
 Affected: 2008.0
 _______________________________________________________________________
 
 Problem Description:
 
 A potential vulnerability was discovered in Qt4 version 4.3.0 through
 4.3.2 which may cause a certificate verification in SSL connections
 not to be performed.  As a result, code that uses QSslSocket could
 be tricked into thinking that the certificate was verified correctly
 when it actually failed in one or more criteria.
 
 The updated packages have been patched to correct this issue.
 _______________________________________________________________________

 References:
 
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5965
 press.2007-12-21.2182567220
 _______________________________________________________________________
 
 Updated Packages:
 
 Mandriva Linux 2008.0:
 9892e330bfdea25e6413b35ec8bbe065 
 2008.0/i586/libqassistant1-4.3.1-12.1mdv2008.0.i586.rpm
 f8b0bc238f5e4040c0e1a4c52d36fcff 
 2008.0/i586/libqt3support4-4.3.1-12.1mdv2008.0.i586.rpm
 c01bef3b080956c8a342b08b8a1c44f3 
 2008.0/i586/libqt4-devel-4.3.1-12.1mdv2008.0.i586.rpm
 38e5dbe9bb71c70df4a899a5e3565506 
 2008.0/i586/libqtcore4-4.3.1-12.1mdv2008.0.i586.rpm
 a366f116831687ce4b5c12c3c379ed33 
 2008.0/i586/libqtdbus4-4.3.1-12.1mdv2008.0.i586.rpm
 21c55d28fb48f5007849ba8d173f034e 
 2008.0/i586/libqtdesigner1-4.3.1-12.1mdv2008.0.i586.rpm
 ab24b17d472efb5430d06bbad8b29c4d 
 2008.0/i586/libqtgui4-4.3.1-12.1mdv2008.0.i586.rpm
 321b4ee6a9461cec4a543d6766e23824 
 2008.0/i586/libqtnetwork4-4.3.1-12.1mdv2008.0.i586.rpm
 13026ce7524212b11f59af029504bbfc 
 2008.0/i586/libqtopengl4-4.3.1-12.1mdv2008.0.i586.rpm
 3ab94beb4c00604d633653f5152ba79f 
 2008.0/i586/libqtscript4-4.3.1-12.1mdv2008.0.i586.rpm
 78e85399d17d2d13732deaecdc31b51d 
 2008.0/i586/libqtsql4-4.3.1-12.1mdv2008.0.i586.rpm
 a8a9722b8ceecd3e3e4ecf264b74050d 
 2008.0/i586/libqtsvg4-4.3.1-12.1mdv2008.0.i586.rpm
 405c08ac629be45cd62aac89554c30cd 
 2008.0/i586/libqttest4-4.3.1-12.1mdv2008.0.i586.rpm
 3db94cdadd714cb3dba5ca0f1f41d561 
 2008.0/i586/libqtuitools4-4.3.1-12.1mdv2008.0.i586.rpm
 5fbf9397f30954b22d3e068d2f5ee523 
 2008.0/i586/libqtxml4-4.3.1-12.1mdv2008.0.i586.rpm
 487ea8eeb121f73194bc8e0117fe77be 
 2008.0/i586/qt4-accessibility-plugin-lib-4.3.1-12.1mdv2008.0.i586.rpm
 9f0841dc6a2a31caba420b8aa284c4a7 
 2008.0/i586/qt4-assistant-4.3.1-12.1mdv2008.0.i586.rpm
 d00096b568d5b5dae8a55420c60acdf8 
 2008.0/i586/qt4-codecs-plugin-lib-4.3.1-12.1mdv2008.0.i586.rpm
 97fbcb80fd078b70859aa792c6dc16b5 
 2008.0/i586/qt4-common-4.3.1-12.1mdv2008.0.i586.rpm
 a85a2e3b2be98f14754411f1fed34a55 
 2008.0/i586/qt4-database-plugin-mysql-lib-4.3.1-12.1mdv2008.0.i586.rpm
 244f3e6e6b2cd4751b1d68c809025bc7 
 2008.0/i586/qt4-database-plugin-odbc-lib-4.3.1-12.1mdv2008.0.i586.rpm
 66afc64e0c50120a9b674f1ed48421c5 
 2008.0/i586/qt4-database-plugin-pgsql-lib-4.3.1-12.1mdv2008.0.i586.rpm
 ee488e093fd920d0a707b4a1db1c6fa4 
 2008.0/i586/qt4-database-plugin-sqlite-lib-4.3.1-12.1mdv2008.0.i586.rpm
 1292dc112e626d257212cb8c1f8a2c36 
 2008.0/i586/qt4-designer-4.3.1-12.1mdv2008.0.i586.rpm
 5165061dfdf84dcb78509818e447c036 
 2008.0/i586/qt4-doc-4.3.1-12.1mdv2008.0.i586.rpm
 c50f6f4474fd606cb71989eb4822465b 
 2008.0/i586/qt4-examples-4.3.1-12.1mdv2008.0.i586.rpm
 bc42ac400160c55c4b35332bcd92d73c 
 2008.0/i586/qt4-linguist-4.3.1-12.1mdv2008.0.i586.rpm
 fbcd20b52b762696c1f3de9386102f19 
 2008.0/i586/qt4-qtdbus-4.3.1-12.1mdv2008.0.i586.rpm
 74f23c3ea68198a21f31e2fda7175a46 
 2008.0/i586/qt4-qvfb-4.3.1-12.1mdv2008.0.i586.rpm
 a7613cde958d622e432e730d7969bc94 
 2008.0/i586/qt4-tutorial-4.3.1-12.1mdv2008.0.i586.rpm 
 a81a3d38966f72ae51b787c8505b0045  2008.0/SRPMS/qt4-4.3.1-12.1mdv2008.0.src.rpm

 Mandriva Linux 2008.0/X86_64:
 f0d5dc297fc63f3c650d662182eb2e6a 
 2008.0/x86_64/lib64qassistant1-4.3.1-12.1mdv2008.0.x86_64.rpm
 a85d2f673b21770c9a2775ba74755a91 
 2008.0/x86_64/lib64qt3support4-4.3.1-12.1mdv2008.0.x86_64.rpm
 71b5ec95059347b0c8879748f732d4d3 
 2008.0/x86_64/lib64qt4-devel-4.3.1-12.1mdv2008.0.x86_64.rpm
 0833417df8b4f279f21801855e192c61 
 2008.0/x86_64/lib64qtcore4-4.3.1-12.1mdv2008.0.x86_64.rpm
 3b563a0e1b7c424d74c01e98359f8336 
 2008.0/x86_64/lib64qtdbus4-4.3.1-12.1mdv2008.0.x86_64.rpm
 c5f892fc94c05008552f60a83cd28c51 
 2008.0/x86_64/lib64qtdesigner1-4.3.1-12.1mdv2008.0.x86_64.rpm
 2e0bec990bff5b842c8e8fc13f553ccb 
 2008.0/x86_64/lib64qtgui4-4.3.1-12.1mdv2008.0.x86_64.rpm
 d92b3c89bcf9ba9d332c762e94d6f5cf 
 2008.0/x86_64/lib64qtnetwork4-4.3.1-12.1mdv2008.0.x86_64.rpm
 0e116dc52bede2c7da46be005f8d8d16 
 2008.0/x86_64/lib64qtopengl4-4.3.1-12.1mdv2008.0.x86_64.rpm
 e8ce343308abea504f515afda06fa0be 
 2008.0/x86_64/lib64qtscript4-4.3.1-12.1mdv2008.0.x86_64.rpm
 cb1457ab2b436495ce36deae66078d36 
 2008.0/x86_64/lib64qtsql4-4.3.1-12.1mdv2008.0.x86_64.rpm
 2f1d0e82f650dfe8aff775b544be9963 
 2008.0/x86_64/lib64qtsvg4-4.3.1-12.1mdv2008.0.x86_64.rpm
 37f7e45b3b8191491ef9e7007918632f 
 2008.0/x86_64/lib64qttest4-4.3.1-12.1mdv2008.0.x86_64.rpm
 9aaf39a6324b754e537b4853c1e4ab69 
 2008.0/x86_64/lib64qtuitools4-4.3.1-12.1mdv2008.0.x86_64.rpm
 e2b342f677b6455ade6c5bec8de7e65d 
 2008.0/x86_64/lib64qtxml4-4.3.1-12.1mdv2008.0.x86_64.rpm
 32dcf23e048930f8827241f5799d3724 
 2008.0/x86_64/qt4-accessibility-plugin-lib64-4.3.1-12.1mdv2008.0.x86_64.rpm
 8fc0e37845c71b1ea7af0ee4c29c0953 
 2008.0/x86_64/qt4-assistant-4.3.1-12.1mdv2008.0.x86_64.rpm
 17ff2b701839a3a61393adaa644e8408 
 2008.0/x86_64/qt4-codecs-plugin-lib64-4.3.1-12.1mdv2008.0.x86_64.rpm
 1aa85044040591f4749120e4457c7bd0 
 2008.0/x86_64/qt4-common-4.3.1-12.1mdv2008.0.x86_64.rpm
 46b5a01974b850cec6e15834c16184a5 
 2008.0/x86_64/qt4-database-plugin-mysql-lib64-4.3.1-12.1mdv2008.0.x86_64.rpm
 3f80c878b4f65d7b232da1c6ae974933 
 2008.0/x86_64/qt4-database-plugin-odbc-lib64-4.3.1-12.1mdv2008.0.x86_64.rpm
 cfb1cfd18bd2adc874504d9bec7573c4 
 2008.0/x86_64/qt4-database-plugin-pgsql-lib64-4.3.1-12.1mdv2008.0.x86_64.rpm
 3d44014208f9170fa17e28dfe17e4d0e 
 2008.0/x86_64/qt4-database-plugin-sqlite-lib64-4.3.1-12.1mdv2008.0.x86_64.rpm
 a4ff08c40609d0104d376748c12cd560 
 2008.0/x86_64/qt4-designer-4.3.1-12.1mdv2008.0.x86_64.rpm
 6724c21c07be1a4432c31a2eb250429c 
 2008.0/x86_64/qt4-doc-4.3.1-12.1mdv2008.0.x86_64.rpm
 eae92efad52acc32623fb91aef2eff30 
 2008.0/x86_64/qt4-examples-4.3.1-12.1mdv2008.0.x86_64.rpm
 1aaa5cd4e3691a90e7c740f79fa371fa 
 2008.0/x86_64/qt4-linguist-4.3.1-12.1mdv2008.0.x86_64.rpm
 133e0fa6e84d6881fc8812aa4f9d7352 
 2008.0/x86_64/qt4-qtdbus-4.3.1-12.1mdv2008.0.x86_64.rpm
 8d376491fbe47b7a1a6f7b02e74e2a07 
 2008.0/x86_64/qt4-qvfb-4.3.1-12.1mdv2008.0.x86_64.rpm
 16798b4d0a36cb3581523fed094d7f66 
 2008.0/x86_64/qt4-tutorial-4.3.1-12.1mdv2008.0.x86_64.rpm 
 a81a3d38966f72ae51b787c8505b0045  2008.0/SRPMS/qt4-4.3.1-12.1mdv2008.0.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)

iD8DBQFHq8DOmqjQ0CJFipgRAuVbAJ4rh2er1D2hN27VwfM4lzlndzokzwCgi09Y
iHECyKOHTcf453NYqRgJrhU=
=Mgl8
-----END PGP SIGNATURE-----


------------=_1202449567-4794-9834
Content-Type: text/plain; name="message-footer.txt"
Content-Disposition: inline; filename="message-footer.txt"
Content-Transfer-Encoding: 8bit

To unsubscribe, send a email to sympa@mandrivalinux.org
with this subject : unsubscribe security-announce
_______________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://www.mandrivastore.com
Join the Club : http://www.mandrivaclub.com
_______________________________________________________

------------=_1202449567-4794-9834--