-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 --------------------------------------------------------------------------
   Turbolinux Security Advisory TLSA-2006-37
   http://www.turbolinux.co.jp/security/
                                             security-team@turbolinux.co.jp
 --------------------------------------------------------------------------

 Original released date: 07 Nov 2006
 Last revised: 07 Nov 2006

 Package: qt3

 Summary: Integer overflow

 More information:
    Qt is a complete and well-designed multi-platform object-oriented
    framework for developing graphical user interface (GUI) applications using
 C++.

     Integer overflow vulnerabilities have been discovered in qt3.

 Impact:
    These vulnerabilities may allow remote attackers to execute arbitrary
    code via malformed pixmap image files.

 Affected Products:
    - Turbolinux FUJI


 <Turbolinux FUJI>

   Source Packages
   Size: MD5

   qt3-3.3.4-14.src.rpm
     14665418 ccceb014c4933eae8f81b9ceafc86d2c

   Binary Packages
   Size: MD5

   qt3-3.3.4-14.i686.rpm
      6468909 1132427bf1312d343f04ad53ead06509
   qt3-devel-3.3.4-14.i686.rpm
      3731218 6ccb10c73e8ca93254886f67ebf9288f
   qt3-doc-3.3.4-14.i686.rpm
      8072435 f60f2d8faf6b159f802930a8b30d80f8
   qt3-examples-3.3.4-14.i686.rpm
      4007289 119fb56251b0a19529260f6ce20a4328
   qt3-sql-MySQL-3.3.4-14.i686.rpm
        32244 5b30c6edb792476cd606ca60bd4ea0ed
   qt3-sql-ODBC-3.3.4-14.i686.rpm
        51181 d5f929d46ffdcec4994bd1025cd154e9
   qt3-sql-postgresql-3.3.4-14.i686.rpm
        39924 add862a2596fe599f569ba094651d77d
   qt3-tools-3.3.4-14.i686.rpm
      2120789 16498e6a9a7f53d2003e3556f4bcbb2b


 CVE
   [CVE-2006-4811]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4811

 --------------------------------------------------------------------------
 Revision History
    07 Nov 2006 Initial release
 --------------------------------------------------------------------------

 Copyright(C) 2006 Turbolinux, Inc. All rights reserved. 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFFUEvqK0LzjOqIJMwRAv12AJ0TIeDb8bUnINrpF1v76Fc03nvjAACgsoH7
X2cuA5E4miN7LK3BV71Psco=
=/0vl
-----END PGP SIGNATURE-----