qt4-x11 4.4.3-0ubuntu1.4 source package in Ubuntu

Changelog

qt4-x11 (4.4.3-0ubuntu1.4) intrepid-security; urgency=low

  * SECURITY UPDATE: remote code execution via document with a SVGPathList
    data structure containing a negative index.
    - debian/patches/security_CVE-2009-0945.diff: make sure index is valid
      in src/3rdparty/webkit/WebCore/svg/SVGList.h.
    - CVE-2009-0945
  * SECURITY UPDATE: denial of service or arbitrary code execution via
    JavaScript garbage collector allocation failures.
    - debian/patches/security_CVE-2009-1687.diff: make sure numBlocks is
      valid in src/3rdparty/webkit/JavaScriptCore/runtime/Collector.cpp.
    - CVE-2009-1687
  * SECURITY UPDATE: denial of service or arbitrary code execution via
    use-after-free.
    - debian/patches/security_CVE-2009-1690.diff: Fix incorrect handling of
      head element in src/3rdparty/webkit/WebCore/html/HTMLParser.{h,cpp}.
    - CVE-2009-1690
  * SECURITY UPDATE: denial of service or arbitrary code execution via
    attr function call with a large numerical argument.
    - debian/patches/security_CVE-2009-1698.diff: fix attr handling in
      src/3rdparty/webkit/WebCore/css/{CSSParser,CSSPrimitiveValue}.cpp.
    - CVE-2009-1698
  * SECURITY UPDATE: arbitrary file disclosure via crafted DTD.
    - debian/patches/security_CVE-2009-1698.diff: fix
      shouldAllowExternalLoad logic in
      src/3rdparty/webkit/WebCore/dom/XMLTokenizer.cpp.
    - CVE-2009-1699
  * SECURITY UPDATE: denial of service or arbitrary code execution via
    crafted HTML document with Attr DOM objects.
    - debian/patches/security_CVE-2009-1711.diff: add isMappedAttribute
      and remove attributeItem, getAttributeItem in
      src/3rdparty/webkit/WebCore/css/CSSStyleSelector.cpp,
      src/3rdparty/webkit/WebCore/dom/{Attribute.h,MappedAttribute.h,
      NamedMappedAttrMap.*,StyledElement.cpp},
      src/3rdparty/webkit/WebCore/html/HTMLInputElement.cpp.
    - CVE-2009-1711
  * SECURITY UPDATE: arbitrary code execution via remote loading of
    local java applets.
    - debian/patches/security_CVE-2009-1712.diff: Use same rule for loading
      java applets as webkit does for images in
      src/3rdparty/webkit/WebCore/html/HTMLAppletElement.cpp,
      src/3rdparty/webkit/WebCore/loader/FrameLoader.cpp.
    - CVE-2009-1712
  * SECURITY UPDATE: arbitrary file disclosure via XSLT functionality
    - debian/patches/security_CVE-2009-1713.diff: Test that the XSL
      document() function doesn't load a document from a foreign origin in
      src/3rdparty/webkit/WebCore/xml/XSLTProcessor.cpp.
    - CVE-2009-1713
  * SECURITY UPDATE: denial of service or arbitrary code execution via
    numeric character references.
    - debian/patches/security_CVE-2009-1725.diff: increase size of
      checkBuffer() in src/3rdparty/webkit/WebCore/html/HTMLTokenizer.cpp.
    - CVE-2009-1725

 -- Marc Deslauriers <email address hidden>   Mon, 26 Oct 2009 15:08:47 -0400