Multiple security flaws (integer underflow, invalid pointer dereference, buffer underflow and a denial of service) were found in the way WebKit's FTP parser used to process remote FTP directory listings. If a remote FTP server issued a specially-crafted FTP command, it could lead to disclosure of sensitive information, denial of service (application crash) or, potentially to execution of arbitrary code, once the command was parsed. Upstream bug report: -------------------- https://bugs.webkit.org/show_bug.cgi?id=29294 Upstream patch: --------------- http://trac.webkit.org/changeset/48725 Credit: ------- Michal Zalewski
This issue affects latest versions of WebKit package, as shipped with Fedora release of 10 and 11 (WebKit-1.1.0-0.16.svn40351.fc10 and WebKit-1.1.1-1.fc11). This issue affects latest versions of qt package, as shipped with Fedora release of 10 and 11 (qt-4.5.2-3.fc10 and qt-4.5.2-3.fc11).
Public now via: http://threatpost.com/en_us/blogs/apple-patches-critical-safari-vulnerabilities-111109
qt-4.5.3-9.fc12 has been submitted as an update for Fedora 12. http://admin.fedoraproject.org/updates/qt-4.5.3-9.fc12
qt-4.5.3-9.fc12 has been pushed to the Fedora 12 stable repository. If problems still persist, please make note of it in this bug report.
qt-4.5.3-9.fc10 has been pushed to the Fedora 10 stable repository. If problems still persist, please make note of it in this bug report.
qt-4.5.3-9.fc11 has been pushed to the Fedora 11 stable repository. If problems still persist, please make note of it in this bug report.
This issue does not affect kdelibs or qt3 as provided with Red Hat Enterprise Linux 3, 4, or 5. QtWebKit was introduced in Qt version 4, and kdelibs would not use this code for Konqueror as it uses the FTP KIO slave.
This flaw was resolved in the version of webkitgtk shipped with Red Hat Enterprise Linux 6.0