Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:3333-1

Опубликовано: 11 окт. 2021
Источник: suse-cvrf

Описание

Security update for libqt5-qtsvg

This update for libqt5-qtsvg fixes the following issues:

  • CVE-2021-3481: Fixed an out of bounds read in function QRadialFetchSimd from crafted svg file. (bsc#1184783)

Список пакетов

SUSE Linux Enterprise Server 12 SP5
libQt5Svg5-5.6.2-3.6.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libQt5Svg5-5.6.2-3.6.1
SUSE Linux Enterprise Software Development Kit 12 SP5
libqt5-qtsvg-devel-5.6.2-3.6.1
libqt5-qtsvg-private-headers-devel-5.6.2-3.6.1

Ссылки

Описание

A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from this vulnerability is to data confidentiality and the application availability.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:libQt5Svg5-5.6.2-3.6.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:libQt5Svg5-5.6.2-3.6.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libqt5-qtsvg-devel-5.6.2-3.6.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libqt5-qtsvg-private-headers-devel-5.6.2-3.6.1
Ссылки