Debian alert DLA-2895-1 (qt4-x11)

From:
             
 
Utkarsh Gupta <utkarsh@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 2895-1] qt4-x11 security update
Date:
             
 
Mon, 24 Jan 2022 23:03:30 +0530
Message-ID:
             
 
 <CAPP0f95ygLQi0Jjh5kGQWFA6_frGmL9aFo9SiBdh41bf7mwFmQ@mail.gmail.com>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -----------------------------------------------------------------------
Debian LTS Advisory DLA-2895-1              debian-lts@lists.debian.org
https://www.debian.org/lts/security/                      Utkarsh Gupta
January 24, 2022                            https://wiki.debian.org/LTS
- -----------------------------------------------------------------------

Package        : qt4-x11
Version        : 4:4.8.7+dfsg-11+deb9u3
CVE ID         : CVE-2021-3481 CVE-2021-45930
Debian Bug     : 986798 1002991

Multiple out-of-bounds error were discovered in qt4-x11.
The highest threat from CVE-2021-3481 (at least) is to data
confidentiality the application availability.

For Debian 9 stretch, these problems have been fixed in version
4:4.8.7+dfsg-11+deb9u3.

We recommend that you upgrade your qt4-x11 packages.

For the detailed security status of qt4-x11 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/qt4-x11

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=Lw/B
-----END PGP SIGNATURE-----