By harminka on 2007-12-28 
Qt 4 versions 4.3.0, 4.3.1 and 4.3.2 have a potential vulnerability in QSslSocket, which might cause a certificate verification in SSL connections not to be performed.
As a consequence, code using QSslSocket might be misled into thinking the certificate was verified correctly when it actually failed in one or more criteria. To solve the issue, apply the following patch. The current maintenance release of Qt (4.3.3) already has the patch included.
This vulnerability has been assigned CVE-2007-5965.-Trolltech
Comment and add to the story without registration, but keep the comments meaningful please. Links are not accepted.
