SUSE-SU-2018:4179-1

Опубликовано: 18 дек. 2018

Источник: suse-cvrf

Описание

Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues:

Security issues fixed:

CVE-2018-15518: Fixed double free in QXmlStreamReader (bsc#1118595)
CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler (bsc#1118596)

Список пакетов

SUSE Linux Enterprise Desktop 12 SP3

libQt5Concurrent5-5.6.2-6.15.2

libQt5Core5-5.6.2-6.15.2

libQt5DBus5-5.6.2-6.15.2

libQt5Gui5-5.6.2-6.15.2

libQt5Network5-5.6.2-6.15.2

libQt5OpenGL5-5.6.2-6.15.2

libQt5PrintSupport5-5.6.2-6.15.2

libQt5Sql5-5.6.2-6.15.2

libQt5Sql5-mysql-5.6.2-6.15.2

libQt5Sql5-postgresql-5.6.2-6.15.2

libQt5Sql5-sqlite-5.6.2-6.15.2

libQt5Sql5-unixODBC-5.6.2-6.15.2

libQt5Test5-5.6.2-6.15.2

libQt5Widgets5-5.6.2-6.15.2

libQt5Xml5-5.6.2-6.15.2

SUSE Linux Enterprise Desktop 12 SP4

libQt5Concurrent5-5.6.2-6.15.2

libQt5Core5-5.6.2-6.15.2

libQt5DBus5-5.6.2-6.15.2

libQt5Gui5-5.6.2-6.15.2

libQt5Network5-5.6.2-6.15.2

libQt5OpenGL5-5.6.2-6.15.2

libQt5PrintSupport5-5.6.2-6.15.2

libQt5Sql5-5.6.2-6.15.2

libQt5Sql5-mysql-5.6.2-6.15.2

libQt5Sql5-postgresql-5.6.2-6.15.2

libQt5Sql5-sqlite-5.6.2-6.15.2

libQt5Sql5-unixODBC-5.6.2-6.15.2

libQt5Test5-5.6.2-6.15.2

libQt5Widgets5-5.6.2-6.15.2

libQt5Xml5-5.6.2-6.15.2

SUSE Linux Enterprise Server 12 SP3

libQt5Concurrent5-5.6.2-6.15.2

libQt5Core5-5.6.2-6.15.2

libQt5DBus5-5.6.2-6.15.2

libQt5Gui5-5.6.2-6.15.2

libQt5Network5-5.6.2-6.15.2

libQt5OpenGL5-5.6.2-6.15.2

libQt5PrintSupport5-5.6.2-6.15.2

libQt5Sql5-5.6.2-6.15.2

libQt5Sql5-mysql-5.6.2-6.15.2

libQt5Sql5-postgresql-5.6.2-6.15.2

libQt5Sql5-sqlite-5.6.2-6.15.2

libQt5Sql5-unixODBC-5.6.2-6.15.2

libQt5Test5-5.6.2-6.15.2

libQt5Widgets5-5.6.2-6.15.2

libQt5Xml5-5.6.2-6.15.2

SUSE Linux Enterprise Server 12 SP4

libQt5Concurrent5-5.6.2-6.15.2

libQt5Core5-5.6.2-6.15.2

libQt5DBus5-5.6.2-6.15.2

libQt5Gui5-5.6.2-6.15.2

libQt5Network5-5.6.2-6.15.2

libQt5OpenGL5-5.6.2-6.15.2

libQt5PrintSupport5-5.6.2-6.15.2

libQt5Sql5-5.6.2-6.15.2

libQt5Sql5-mysql-5.6.2-6.15.2

libQt5Sql5-postgresql-5.6.2-6.15.2

libQt5Sql5-sqlite-5.6.2-6.15.2

libQt5Sql5-unixODBC-5.6.2-6.15.2

libQt5Test5-5.6.2-6.15.2

libQt5Widgets5-5.6.2-6.15.2

libQt5Xml5-5.6.2-6.15.2

SUSE Linux Enterprise Server for SAP Applications 12 SP3

libQt5Concurrent5-5.6.2-6.15.2

libQt5Core5-5.6.2-6.15.2

libQt5DBus5-5.6.2-6.15.2

libQt5Gui5-5.6.2-6.15.2

libQt5Network5-5.6.2-6.15.2

libQt5OpenGL5-5.6.2-6.15.2

libQt5PrintSupport5-5.6.2-6.15.2

libQt5Sql5-5.6.2-6.15.2

libQt5Sql5-mysql-5.6.2-6.15.2

libQt5Sql5-postgresql-5.6.2-6.15.2

libQt5Sql5-sqlite-5.6.2-6.15.2

libQt5Sql5-unixODBC-5.6.2-6.15.2

libQt5Test5-5.6.2-6.15.2

libQt5Widgets5-5.6.2-6.15.2

libQt5Xml5-5.6.2-6.15.2

SUSE Linux Enterprise Server for SAP Applications 12 SP4

libQt5Concurrent5-5.6.2-6.15.2

libQt5Core5-5.6.2-6.15.2

libQt5DBus5-5.6.2-6.15.2

libQt5Gui5-5.6.2-6.15.2

libQt5Network5-5.6.2-6.15.2

libQt5OpenGL5-5.6.2-6.15.2

libQt5PrintSupport5-5.6.2-6.15.2

libQt5Sql5-5.6.2-6.15.2

libQt5Sql5-mysql-5.6.2-6.15.2

libQt5Sql5-postgresql-5.6.2-6.15.2

libQt5Sql5-sqlite-5.6.2-6.15.2

libQt5Sql5-unixODBC-5.6.2-6.15.2

libQt5Test5-5.6.2-6.15.2

libQt5Widgets5-5.6.2-6.15.2

libQt5Xml5-5.6.2-6.15.2

SUSE Linux Enterprise Software Development Kit 12 SP3

libQt5Bootstrap-devel-static-5.6.2-6.15.2

libQt5Concurrent-devel-5.6.2-6.15.2

libQt5Core-devel-5.6.2-6.15.2

libQt5Core-private-headers-devel-5.6.2-6.15.2

libQt5DBus-devel-5.6.2-6.15.2

libQt5DBus-private-headers-devel-5.6.2-6.15.2

libQt5Gui-devel-5.6.2-6.15.2

libQt5Gui-private-headers-devel-5.6.2-6.15.2

libQt5Network-devel-5.6.2-6.15.2

libQt5Network-private-headers-devel-5.6.2-6.15.2

libQt5OpenGL-devel-5.6.2-6.15.2

libQt5OpenGL-private-headers-devel-5.6.2-6.15.2

libQt5OpenGLExtensions-devel-static-5.6.2-6.15.2

libQt5PlatformHeaders-devel-5.6.2-6.15.2

libQt5PlatformSupport-devel-static-5.6.2-6.15.2

libQt5PlatformSupport-private-headers-devel-5.6.2-6.15.2

libQt5PrintSupport-devel-5.6.2-6.15.2

libQt5PrintSupport-private-headers-devel-5.6.2-6.15.2

libQt5Sql-devel-5.6.2-6.15.2

libQt5Sql-private-headers-devel-5.6.2-6.15.2

libQt5Test-devel-5.6.2-6.15.2

libQt5Test-private-headers-devel-5.6.2-6.15.2

libQt5Widgets-devel-5.6.2-6.15.2

libQt5Widgets-private-headers-devel-5.6.2-6.15.2

libQt5Xml-devel-5.6.2-6.15.2

libqt5-qtbase-common-devel-5.6.2-6.15.2

libqt5-qtbase-devel-5.6.2-6.15.2

libqt5-qtbase-private-headers-devel-5.6.2-6.15.2

SUSE Linux Enterprise Software Development Kit 12 SP4

libQt5Bootstrap-devel-static-5.6.2-6.15.2

libQt5Concurrent-devel-5.6.2-6.15.2

libQt5Core-devel-5.6.2-6.15.2

libQt5Core-private-headers-devel-5.6.2-6.15.2

libQt5DBus-devel-5.6.2-6.15.2

libQt5DBus-private-headers-devel-5.6.2-6.15.2

libQt5Gui-devel-5.6.2-6.15.2

libQt5Gui-private-headers-devel-5.6.2-6.15.2

libQt5Network-devel-5.6.2-6.15.2

libQt5Network-private-headers-devel-5.6.2-6.15.2

libQt5OpenGL-devel-5.6.2-6.15.2

libQt5OpenGL-private-headers-devel-5.6.2-6.15.2

libQt5OpenGLExtensions-devel-static-5.6.2-6.15.2

libQt5PlatformHeaders-devel-5.6.2-6.15.2

libQt5PlatformSupport-devel-static-5.6.2-6.15.2

libQt5PlatformSupport-private-headers-devel-5.6.2-6.15.2

libQt5PrintSupport-devel-5.6.2-6.15.2

libQt5PrintSupport-private-headers-devel-5.6.2-6.15.2

libQt5Sql-devel-5.6.2-6.15.2

libQt5Sql-private-headers-devel-5.6.2-6.15.2

libQt5Test-devel-5.6.2-6.15.2

libQt5Test-private-headers-devel-5.6.2-6.15.2

libQt5Widgets-devel-5.6.2-6.15.2

libQt5Widgets-private-headers-devel-5.6.2-6.15.2

libQt5Xml-devel-5.6.2-6.15.2

libqt5-qtbase-common-devel-5.6.2-6.15.2

libqt5-qtbase-devel-5.6.2-6.15.2

libqt5-qtbase-private-headers-devel-5.6.2-6.15.2

Ссылки

https://www.suse.com/support/update/announcement/2018/suse-su-20184179-1/
Link for SUSE-SU-2018:4179-1
https://lists.suse.com/pipermail/sle-security-updates/2018-December/004976.html
E-Mail link for SUSE-SU-2018:4179-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1118595
SUSE Bug 1118595
https://bugzilla.suse.com/1118596
SUSE Bug 1118596
https://www.suse.com/security/cve/CVE-2018-15518/
SUSE CVE CVE-2018-15518 page
https://www.suse.com/security/cve/CVE-2018-19873/
SUSE CVE CVE-2018-19873 page

Описание

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.

Затронутые продукты

SUSE Linux Enterprise Desktop 12 SP3:libQt5Concurrent5-5.6.2-6.15.2

SUSE Linux Enterprise Desktop 12 SP3:libQt5Core5-5.6.2-6.15.2

SUSE Linux Enterprise Desktop 12 SP3:libQt5DBus5-5.6.2-6.15.2

SUSE Linux Enterprise Desktop 12 SP3:libQt5Gui5-5.6.2-6.15.2

Ссылки

https://www.suse.com/security/cve/CVE-2018-15518.html
CVE-2018-15518
https://bugzilla.suse.com/1118595
SUSE Bug 1118595
https://bugzilla.suse.com/1126909
SUSE Bug 1126909

Описание

An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.

Затронутые продукты

SUSE Linux Enterprise Desktop 12 SP3:libQt5Concurrent5-5.6.2-6.15.2

SUSE Linux Enterprise Desktop 12 SP3:libQt5Core5-5.6.2-6.15.2

SUSE Linux Enterprise Desktop 12 SP3:libQt5DBus5-5.6.2-6.15.2

SUSE Linux Enterprise Desktop 12 SP3:libQt5Gui5-5.6.2-6.15.2

Ссылки

https://www.suse.com/security/cve/CVE-2018-19873.html
CVE-2018-19873
https://bugzilla.suse.com/1118596
SUSE Bug 1118596
https://bugzilla.suse.com/1126909
SUSE Bug 1126909

SUSE-SU-2018:4179-1

Описание

Список пакетов

SUSE Linux Enterprise Desktop 12 SP3

SUSE Linux Enterprise Desktop 12 SP4

SUSE Linux Enterprise Server 12 SP3

SUSE Linux Enterprise Server 12 SP4

SUSE Linux Enterprise Server for SAP Applications 12 SP3

SUSE Linux Enterprise Server for SAP Applications 12 SP4

SUSE Linux Enterprise Software Development Kit 12 SP3

SUSE Linux Enterprise Software Development Kit 12 SP4

Ссылки

Уязвимость: CVE-2018-15518

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2018-19873

Описание

Затронутые продукты

Ссылки