SUSE-SU-2018:4210-2

Опубликовано: 26 апр. 2019

Источник: suse-cvrf

Описание

Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues:

Security issues fixed:

CVE-2018-15518: Fixed double free in QXmlStreamReader (bsc#1118595)
CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler (bsc#1118596)

libQt5Core5-5.5.1-8.3.1

libQt5DBus5-5.5.1-8.3.1

libQt5Gui5-5.5.1-8.3.1

libQt5Network5-5.5.1-8.3.1

libQt5Widgets5-5.5.1-8.3.1

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.

SUSE Linux Enterprise Server for SAP Applications 12 SP1:libQt5Core5-5.5.1-8.3.1

SUSE Linux Enterprise Server for SAP Applications 12 SP1:libQt5DBus5-5.5.1-8.3.1

SUSE Linux Enterprise Server for SAP Applications 12 SP1:libQt5Gui5-5.5.1-8.3.1

SUSE Linux Enterprise Server for SAP Applications 12 SP1:libQt5Network5-5.5.1-8.3.1

An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.

SUSE Linux Enterprise Server for SAP Applications 12 SP1:libQt5Core5-5.5.1-8.3.1

SUSE Linux Enterprise Server for SAP Applications 12 SP1:libQt5DBus5-5.5.1-8.3.1

SUSE Linux Enterprise Server for SAP Applications 12 SP1:libQt5Gui5-5.5.1-8.3.1

SUSE Linux Enterprise Server for SAP Applications 12 SP1:libQt5Network5-5.5.1-8.3.1