Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:2816-1

Опубликовано: 13 июл. 2023
Источник: suse-cvrf

Описание

Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues:

  • CVE-2020-24741: Fixed a bug that allow QLibrary to load libraries relative to CWD which could result in arbitrary code execution (bsc#1189408).
  • CVE-2023-32763: Fixed buffer overflow in QTextLayout (bsc#1211798).

Список пакетов

Image SLES12-SP5-Azure-SAP-BYOS
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
Image SLES12-SP5-Azure-SAP-On-Demand
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
Image SLES12-SP5-EC2-SAP-BYOS
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
Image SLES12-SP5-EC2-SAP-On-Demand
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
Image SLES12-SP5-GCE-SAP-BYOS
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
Image SLES12-SP5-GCE-SAP-On-Demand
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
SUSE Linux Enterprise Server 12 SP4-ESPOS
libQt5Concurrent5-5.6.2-6.33.1
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5OpenGL5-5.6.2-6.33.1
libQt5PrintSupport5-5.6.2-6.33.1
libQt5Sql5-5.6.2-6.33.1
libQt5Sql5-mysql-5.6.2-6.33.1
libQt5Sql5-postgresql-5.6.2-6.33.1
libQt5Sql5-sqlite-5.6.2-6.33.1
libQt5Sql5-unixODBC-5.6.2-6.33.1
libQt5Test5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
libQt5Xml5-5.6.2-6.33.1
SUSE Linux Enterprise Server 12 SP4-LTSS
libQt5Concurrent5-5.6.2-6.33.1
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5OpenGL5-5.6.2-6.33.1
libQt5PrintSupport5-5.6.2-6.33.1
libQt5Sql5-5.6.2-6.33.1
libQt5Sql5-mysql-5.6.2-6.33.1
libQt5Sql5-postgresql-5.6.2-6.33.1
libQt5Sql5-sqlite-5.6.2-6.33.1
libQt5Sql5-unixODBC-5.6.2-6.33.1
libQt5Test5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
libQt5Xml5-5.6.2-6.33.1
SUSE Linux Enterprise Server 12 SP5
libQt5Concurrent5-5.6.2-6.33.1
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5OpenGL5-5.6.2-6.33.1
libQt5PrintSupport5-5.6.2-6.33.1
libQt5Sql5-5.6.2-6.33.1
libQt5Sql5-mysql-5.6.2-6.33.1
libQt5Sql5-postgresql-5.6.2-6.33.1
libQt5Sql5-sqlite-5.6.2-6.33.1
libQt5Sql5-unixODBC-5.6.2-6.33.1
libQt5Test5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
libQt5Xml5-5.6.2-6.33.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
libQt5Concurrent5-5.6.2-6.33.1
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5OpenGL5-5.6.2-6.33.1
libQt5PrintSupport5-5.6.2-6.33.1
libQt5Sql5-5.6.2-6.33.1
libQt5Sql5-mysql-5.6.2-6.33.1
libQt5Sql5-postgresql-5.6.2-6.33.1
libQt5Sql5-sqlite-5.6.2-6.33.1
libQt5Sql5-unixODBC-5.6.2-6.33.1
libQt5Test5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
libQt5Xml5-5.6.2-6.33.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libQt5Concurrent5-5.6.2-6.33.1
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5OpenGL5-5.6.2-6.33.1
libQt5PrintSupport5-5.6.2-6.33.1
libQt5Sql5-5.6.2-6.33.1
libQt5Sql5-mysql-5.6.2-6.33.1
libQt5Sql5-postgresql-5.6.2-6.33.1
libQt5Sql5-sqlite-5.6.2-6.33.1
libQt5Sql5-unixODBC-5.6.2-6.33.1
libQt5Test5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
libQt5Xml5-5.6.2-6.33.1
SUSE Linux Enterprise Software Development Kit 12 SP5
libQt5Bootstrap-devel-static-5.6.2-6.33.1
libQt5Concurrent-devel-5.6.2-6.33.1
libQt5Core-devel-5.6.2-6.33.1
libQt5Core-private-headers-devel-5.6.2-6.33.1
libQt5DBus-devel-5.6.2-6.33.1
libQt5DBus-private-headers-devel-5.6.2-6.33.1
libQt5Gui-devel-5.6.2-6.33.1
libQt5Gui-private-headers-devel-5.6.2-6.33.1
libQt5Network-devel-5.6.2-6.33.1
libQt5Network-private-headers-devel-5.6.2-6.33.1
libQt5OpenGL-devel-5.6.2-6.33.1
libQt5OpenGL-private-headers-devel-5.6.2-6.33.1
libQt5OpenGLExtensions-devel-static-5.6.2-6.33.1
libQt5PlatformHeaders-devel-5.6.2-6.33.1
libQt5PlatformSupport-devel-static-5.6.2-6.33.1
libQt5PlatformSupport-private-headers-devel-5.6.2-6.33.1
libQt5PrintSupport-devel-5.6.2-6.33.1
libQt5PrintSupport-private-headers-devel-5.6.2-6.33.1
libQt5Sql-devel-5.6.2-6.33.1
libQt5Sql-private-headers-devel-5.6.2-6.33.1
libQt5Test-devel-5.6.2-6.33.1
libQt5Test-private-headers-devel-5.6.2-6.33.1
libQt5Widgets-devel-5.6.2-6.33.1
libQt5Widgets-private-headers-devel-5.6.2-6.33.1
libQt5Xml-devel-5.6.2-6.33.1
libqt5-qtbase-common-devel-5.6.2-6.33.1
libqt5-qtbase-devel-5.6.2-6.33.1
libqt5-qtbase-private-headers-devel-5.6.2-6.33.1
SUSE OpenStack Cloud 9
libQt5Concurrent5-5.6.2-6.33.1
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5OpenGL5-5.6.2-6.33.1
libQt5PrintSupport5-5.6.2-6.33.1
libQt5Sql5-5.6.2-6.33.1
libQt5Sql5-mysql-5.6.2-6.33.1
libQt5Sql5-postgresql-5.6.2-6.33.1
libQt5Sql5-sqlite-5.6.2-6.33.1
libQt5Sql5-unixODBC-5.6.2-6.33.1
libQt5Test5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
libQt5Xml5-5.6.2-6.33.1
SUSE OpenStack Cloud Crowbar 9
libQt5Concurrent5-5.6.2-6.33.1
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5OpenGL5-5.6.2-6.33.1
libQt5PrintSupport5-5.6.2-6.33.1
libQt5Sql5-5.6.2-6.33.1
libQt5Sql5-mysql-5.6.2-6.33.1
libQt5Sql5-postgresql-5.6.2-6.33.1
libQt5Sql5-sqlite-5.6.2-6.33.1
libQt5Sql5-unixODBC-5.6.2-6.33.1
libQt5Test5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
libQt5Xml5-5.6.2-6.33.1

Описание

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-0570. Reason: This candidate is a duplicate of CVE-2020-0570. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2020-0570 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.


Затронутые продукты
Image SLES12-SP5-Azure-SAP-BYOS:libQt5Core5-5.6.2-6.33.1
Image SLES12-SP5-Azure-SAP-BYOS:libQt5DBus5-5.6.2-6.33.1
Image SLES12-SP5-Azure-SAP-BYOS:libQt5Gui5-5.6.2-6.33.1
Image SLES12-SP5-Azure-SAP-BYOS:libQt5Network5-5.6.2-6.33.1

Ссылки

Описание

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. When a SVG file with an image inside it is rendered, a QTextLayout buffer overflow can be triggered.


Затронутые продукты
Image SLES12-SP5-Azure-SAP-BYOS:libQt5Core5-5.6.2-6.33.1
Image SLES12-SP5-Azure-SAP-BYOS:libQt5DBus5-5.6.2-6.33.1
Image SLES12-SP5-Azure-SAP-BYOS:libQt5Gui5-5.6.2-6.33.1
Image SLES12-SP5-Azure-SAP-BYOS:libQt5Network5-5.6.2-6.33.1

Ссылки
Уязвимость SUSE-SU-2023:2816-1