Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:2357-1

Опубликовано: 27 авг. 2020
Источник: suse-cvrf

Описание

Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues:

  • Fixed a possible crash in certificate parsing.
  • Fixed a DoS in QSslSocket (bsc#1172726, CVE-2020-13962).
  • Added support for PostgreSQL 12 (bsc#1173758).

Список пакетов

Image SLES15-SP2-SAP-Azure
libQt5Core5-5.12.7-4.3.1
libQt5DBus5-5.12.7-4.3.1
libQt5Gui5-5.12.7-4.3.1
libQt5Network5-5.12.7-4.3.1
libQt5Widgets5-5.12.7-4.3.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
libQt5Core5-5.12.7-4.3.1
libQt5DBus5-5.12.7-4.3.1
libQt5Gui5-5.12.7-4.3.1
libQt5Network5-5.12.7-4.3.1
libQt5Widgets5-5.12.7-4.3.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
libQt5Core5-5.12.7-4.3.1
libQt5DBus5-5.12.7-4.3.1
libQt5Gui5-5.12.7-4.3.1
libQt5Network5-5.12.7-4.3.1
libQt5Widgets5-5.12.7-4.3.1
Image SLES15-SP2-SAP-BYOS-Azure
libQt5Core5-5.12.7-4.3.1
libQt5DBus5-5.12.7-4.3.1
libQt5Gui5-5.12.7-4.3.1
libQt5Network5-5.12.7-4.3.1
libQt5Widgets5-5.12.7-4.3.1
Image SLES15-SP2-SAP-BYOS-EC2-HVM
libQt5Core5-5.12.7-4.3.1
libQt5DBus5-5.12.7-4.3.1
libQt5Gui5-5.12.7-4.3.1
libQt5Network5-5.12.7-4.3.1
libQt5Widgets5-5.12.7-4.3.1
Image SLES15-SP2-SAP-BYOS-GCE
libQt5Core5-5.12.7-4.3.1
libQt5DBus5-5.12.7-4.3.1
libQt5Gui5-5.12.7-4.3.1
libQt5Network5-5.12.7-4.3.1
libQt5Widgets5-5.12.7-4.3.1
Image SLES15-SP2-SAP-EC2-HVM
libQt5Core5-5.12.7-4.3.1
libQt5DBus5-5.12.7-4.3.1
libQt5Gui5-5.12.7-4.3.1
libQt5Network5-5.12.7-4.3.1
libQt5Widgets5-5.12.7-4.3.1
Image SLES15-SP2-SAP-GCE
libQt5Core5-5.12.7-4.3.1
libQt5DBus5-5.12.7-4.3.1
libQt5Gui5-5.12.7-4.3.1
libQt5Network5-5.12.7-4.3.1
libQt5Widgets5-5.12.7-4.3.1
Image SLES15-SP3-SAP-BYOS-Azure
libQt5Core5-5.12.7-4.3.1
libQt5DBus5-5.12.7-4.3.1
libQt5Gui5-5.12.7-4.3.1
libQt5Network5-5.12.7-4.3.1
libQt5Widgets5-5.12.7-4.3.1
Image SLES15-SP3-SAP-BYOS-EC2-HVM
libQt5Core5-5.12.7-4.3.1
libQt5DBus5-5.12.7-4.3.1
libQt5Gui5-5.12.7-4.3.1
libQt5Network5-5.12.7-4.3.1
libQt5Widgets5-5.12.7-4.3.1
Image SLES15-SP3-SAP-BYOS-GCE
libQt5Core5-5.12.7-4.3.1
libQt5DBus5-5.12.7-4.3.1
libQt5Gui5-5.12.7-4.3.1
libQt5Network5-5.12.7-4.3.1
libQt5Widgets5-5.12.7-4.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP2
libQt5Concurrent-devel-5.12.7-4.3.1
libQt5Concurrent5-5.12.7-4.3.1
libQt5Core-devel-5.12.7-4.3.1
libQt5Core-private-headers-devel-5.12.7-4.3.1
libQt5Core5-5.12.7-4.3.1
libQt5DBus-devel-5.12.7-4.3.1
libQt5DBus-private-headers-devel-5.12.7-4.3.1
libQt5DBus5-5.12.7-4.3.1
libQt5Gui-devel-5.12.7-4.3.1
libQt5Gui-private-headers-devel-5.12.7-4.3.1
libQt5Gui5-5.12.7-4.3.1
libQt5KmsSupport-devel-static-5.12.7-4.3.1
libQt5KmsSupport-private-headers-devel-5.12.7-4.3.1
libQt5Network-devel-5.12.7-4.3.1
libQt5Network-private-headers-devel-5.12.7-4.3.1
libQt5Network5-5.12.7-4.3.1
libQt5OpenGL-devel-5.12.7-4.3.1
libQt5OpenGL-private-headers-devel-5.12.7-4.3.1
libQt5OpenGL5-5.12.7-4.3.1
libQt5PlatformHeaders-devel-5.12.7-4.3.1
libQt5PlatformSupport-devel-static-5.12.7-4.3.1
libQt5PlatformSupport-private-headers-devel-5.12.7-4.3.1
libQt5PrintSupport-devel-5.12.7-4.3.1
libQt5PrintSupport-private-headers-devel-5.12.7-4.3.1
libQt5PrintSupport5-5.12.7-4.3.1
libQt5Sql-devel-5.12.7-4.3.1
libQt5Sql-private-headers-devel-5.12.7-4.3.1
libQt5Sql5-5.12.7-4.3.1
libQt5Sql5-sqlite-5.12.7-4.3.1
libQt5Test-devel-5.12.7-4.3.1
libQt5Test-private-headers-devel-5.12.7-4.3.1
libQt5Test5-5.12.7-4.3.1
libQt5Widgets-devel-5.12.7-4.3.1
libQt5Widgets-private-headers-devel-5.12.7-4.3.1
libQt5Widgets5-5.12.7-4.3.1
libQt5Xml-devel-5.12.7-4.3.1
libQt5Xml5-5.12.7-4.3.1
libqt5-qtbase-common-devel-5.12.7-4.3.1
libqt5-qtbase-devel-5.12.7-4.3.1
libqt5-qtbase-private-headers-devel-5.12.7-4.3.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP2
libQt5OpenGLExtensions-devel-static-5.12.7-4.3.1
libQt5Sql5-mysql-5.12.7-4.3.1
libQt5Sql5-postgresql-5.12.7-4.3.1
libQt5Sql5-unixODBC-5.12.7-4.3.1
libqt5-qtbase-platformtheme-gtk3-5.12.7-4.3.1

Описание

Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails. (Mumble 1.3.1 is not affected, regardless of the Qt version.)


Затронутые продукты
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libQt5Core5-5.12.7-4.3.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libQt5DBus5-5.12.7-4.3.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libQt5Gui5-5.12.7-4.3.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libQt5Network5-5.12.7-4.3.1

Ссылки
Уязвимость SUSE-SU-2020:2357-1