SUSE-SU-2018:4294-1

Опубликовано: 28 дек. 2018

Источник: suse-cvrf

Описание

Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues:

Security issues fixed:

CVE-2018-15518: Fixed double free in QXmlStreamReader (bsc#1118595)
CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler (bsc#1118596)

libQt5Core5-5.3.1-4.7.2

libQt5DBus5-5.3.1-4.7.2

libQt5Gui5-5.3.1-4.7.2

libQt5Widgets5-5.3.1-4.7.2

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.

SUSE Linux Enterprise Server 12-LTSS:libQt5Core5-5.3.1-4.7.2

SUSE Linux Enterprise Server 12-LTSS:libQt5DBus5-5.3.1-4.7.2

SUSE Linux Enterprise Server 12-LTSS:libQt5Gui5-5.3.1-4.7.2

SUSE Linux Enterprise Server 12-LTSS:libQt5Widgets5-5.3.1-4.7.2

An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.

SUSE Linux Enterprise Server 12-LTSS:libQt5Core5-5.3.1-4.7.2

SUSE Linux Enterprise Server 12-LTSS:libQt5DBus5-5.3.1-4.7.2

SUSE Linux Enterprise Server 12-LTSS:libQt5Gui5-5.3.1-4.7.2

SUSE Linux Enterprise Server 12-LTSS:libQt5Widgets5-5.3.1-4.7.2