ALT-PU-2014-1837

Высокий

ALT-PU-2014-1837: package qt5-connectivity update to version 5.3.1-alt1

Источник

errata.altlinux.org

Дата публикации

27.06.2014

Дата обновления

27.06.2014

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades qt5-connectivity to version 5.3.1-alt1.

Устраненные уязвимости5

CVE-2015-1858

Средний 6.8

Дата публикации: 12.05.2015

CWE-119

Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.

CVSS 2.0

Средний 6.8

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access vector: Network
Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Ссылки

CVE-2015-1858 https://nvd.nist.gov/vuln/detail/CVE-2015-1858

Ссылки1

ALT-PU-2014-1837 https://errata.altlinux.org/ALT-PU-2014-1837

Связанные уязвимости

ALT-PU-2014-1844

CVSS3: 7.5

altlinux

больше 12 лет назад

ALT-PU-2014-1844: package `qt5-websockets` update to version 5.3.1-alt1

ALT-PU-2014-1843

CVSS3: 7.5

altlinux

больше 12 лет назад

ALT-PU-2014-1843: package `qt5-doc` update to version 5.3.1-alt1

ALT-PU-2014-1842

CVSS3: 7.5

altlinux

больше 12 лет назад

ALT-PU-2014-1842: package `qt5-graphicaleffects` update to version 5.3.1-alt1

ALT-PU-2014-1841

CVSS3: 7.5

altlinux

больше 12 лет назад

ALT-PU-2014-1841: package `qt5-translations` update to version 5.3.1-alt1

ALT-PU-2014-1840

CVSS3: 7.5

altlinux

больше 12 лет назад

ALT-PU-2014-1840: package `qt5-sensors` update to version 5.3.1-alt1