Описание
Security update for libqt5-qtbase
This update for libqt5-qtbase fixes the following issues:
- CVE-2020-24741: Fixed a bug that allow QLibrary to load libraries relative to CWD which could result in arbitrary code execution (bsc#1189408).
- CVE-2023-32763: Fixed buffer overflow in QTextLayout (bsc#1211798).
Список пакетов
Image SLES12-SP5-Azure-SAP-BYOS
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
Image SLES12-SP5-Azure-SAP-On-Demand
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
Image SLES12-SP5-EC2-SAP-BYOS
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
Image SLES12-SP5-EC2-SAP-On-Demand
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
Image SLES12-SP5-GCE-SAP-BYOS
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
Image SLES12-SP5-GCE-SAP-On-Demand
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
SUSE Linux Enterprise Server 12 SP4-ESPOS
libQt5Concurrent5-5.6.2-6.33.1
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5OpenGL5-5.6.2-6.33.1
libQt5PrintSupport5-5.6.2-6.33.1
libQt5Sql5-5.6.2-6.33.1
libQt5Sql5-mysql-5.6.2-6.33.1
libQt5Sql5-postgresql-5.6.2-6.33.1
libQt5Sql5-sqlite-5.6.2-6.33.1
libQt5Sql5-unixODBC-5.6.2-6.33.1
libQt5Test5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
libQt5Xml5-5.6.2-6.33.1
SUSE Linux Enterprise Server 12 SP4-LTSS
libQt5Concurrent5-5.6.2-6.33.1
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5OpenGL5-5.6.2-6.33.1
libQt5PrintSupport5-5.6.2-6.33.1
libQt5Sql5-5.6.2-6.33.1
libQt5Sql5-mysql-5.6.2-6.33.1
libQt5Sql5-postgresql-5.6.2-6.33.1
libQt5Sql5-sqlite-5.6.2-6.33.1
libQt5Sql5-unixODBC-5.6.2-6.33.1
libQt5Test5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
libQt5Xml5-5.6.2-6.33.1
SUSE Linux Enterprise Server 12 SP5
libQt5Concurrent5-5.6.2-6.33.1
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5OpenGL5-5.6.2-6.33.1
libQt5PrintSupport5-5.6.2-6.33.1
libQt5Sql5-5.6.2-6.33.1
libQt5Sql5-mysql-5.6.2-6.33.1
libQt5Sql5-postgresql-5.6.2-6.33.1
libQt5Sql5-sqlite-5.6.2-6.33.1
libQt5Sql5-unixODBC-5.6.2-6.33.1
libQt5Test5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
libQt5Xml5-5.6.2-6.33.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
libQt5Concurrent5-5.6.2-6.33.1
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5OpenGL5-5.6.2-6.33.1
libQt5PrintSupport5-5.6.2-6.33.1
libQt5Sql5-5.6.2-6.33.1
libQt5Sql5-mysql-5.6.2-6.33.1
libQt5Sql5-postgresql-5.6.2-6.33.1
libQt5Sql5-sqlite-5.6.2-6.33.1
libQt5Sql5-unixODBC-5.6.2-6.33.1
libQt5Test5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
libQt5Xml5-5.6.2-6.33.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libQt5Concurrent5-5.6.2-6.33.1
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5OpenGL5-5.6.2-6.33.1
libQt5PrintSupport5-5.6.2-6.33.1
libQt5Sql5-5.6.2-6.33.1
libQt5Sql5-mysql-5.6.2-6.33.1
libQt5Sql5-postgresql-5.6.2-6.33.1
libQt5Sql5-sqlite-5.6.2-6.33.1
libQt5Sql5-unixODBC-5.6.2-6.33.1
libQt5Test5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
libQt5Xml5-5.6.2-6.33.1
SUSE Linux Enterprise Software Development Kit 12 SP5
libQt5Bootstrap-devel-static-5.6.2-6.33.1
libQt5Concurrent-devel-5.6.2-6.33.1
libQt5Core-devel-5.6.2-6.33.1
libQt5Core-private-headers-devel-5.6.2-6.33.1
libQt5DBus-devel-5.6.2-6.33.1
libQt5DBus-private-headers-devel-5.6.2-6.33.1
libQt5Gui-devel-5.6.2-6.33.1
libQt5Gui-private-headers-devel-5.6.2-6.33.1
libQt5Network-devel-5.6.2-6.33.1
libQt5Network-private-headers-devel-5.6.2-6.33.1
libQt5OpenGL-devel-5.6.2-6.33.1
libQt5OpenGL-private-headers-devel-5.6.2-6.33.1
libQt5OpenGLExtensions-devel-static-5.6.2-6.33.1
libQt5PlatformHeaders-devel-5.6.2-6.33.1
libQt5PlatformSupport-devel-static-5.6.2-6.33.1
libQt5PlatformSupport-private-headers-devel-5.6.2-6.33.1
libQt5PrintSupport-devel-5.6.2-6.33.1
libQt5PrintSupport-private-headers-devel-5.6.2-6.33.1
libQt5Sql-devel-5.6.2-6.33.1
libQt5Sql-private-headers-devel-5.6.2-6.33.1
libQt5Test-devel-5.6.2-6.33.1
libQt5Test-private-headers-devel-5.6.2-6.33.1
libQt5Widgets-devel-5.6.2-6.33.1
libQt5Widgets-private-headers-devel-5.6.2-6.33.1
libQt5Xml-devel-5.6.2-6.33.1
libqt5-qtbase-common-devel-5.6.2-6.33.1
libqt5-qtbase-devel-5.6.2-6.33.1
libqt5-qtbase-private-headers-devel-5.6.2-6.33.1
SUSE OpenStack Cloud 9
libQt5Concurrent5-5.6.2-6.33.1
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5OpenGL5-5.6.2-6.33.1
libQt5PrintSupport5-5.6.2-6.33.1
libQt5Sql5-5.6.2-6.33.1
libQt5Sql5-mysql-5.6.2-6.33.1
libQt5Sql5-postgresql-5.6.2-6.33.1
libQt5Sql5-sqlite-5.6.2-6.33.1
libQt5Sql5-unixODBC-5.6.2-6.33.1
libQt5Test5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
libQt5Xml5-5.6.2-6.33.1
SUSE OpenStack Cloud Crowbar 9
libQt5Concurrent5-5.6.2-6.33.1
libQt5Core5-5.6.2-6.33.1
libQt5DBus5-5.6.2-6.33.1
libQt5Gui5-5.6.2-6.33.1
libQt5Network5-5.6.2-6.33.1
libQt5OpenGL5-5.6.2-6.33.1
libQt5PrintSupport5-5.6.2-6.33.1
libQt5Sql5-5.6.2-6.33.1
libQt5Sql5-mysql-5.6.2-6.33.1
libQt5Sql5-postgresql-5.6.2-6.33.1
libQt5Sql5-sqlite-5.6.2-6.33.1
libQt5Sql5-unixODBC-5.6.2-6.33.1
libQt5Test5-5.6.2-6.33.1
libQt5Widgets5-5.6.2-6.33.1
libQt5Xml5-5.6.2-6.33.1
Ссылки
- Link for SUSE-SU-2023:2816-1
- E-Mail link for SUSE-SU-2023:2816-1
- SUSE Security Ratings
- SUSE Bug 1189408
- SUSE Bug 1211798
- SUSE CVE CVE-2020-24741 page
- SUSE CVE CVE-2023-32763 page
Описание
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-0570. Reason: This candidate is a duplicate of CVE-2020-0570. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2020-0570 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
Затронутые продукты
Image SLES12-SP5-Azure-SAP-BYOS:libQt5Core5-5.6.2-6.33.1
Image SLES12-SP5-Azure-SAP-BYOS:libQt5DBus5-5.6.2-6.33.1
Image SLES12-SP5-Azure-SAP-BYOS:libQt5Gui5-5.6.2-6.33.1
Image SLES12-SP5-Azure-SAP-BYOS:libQt5Network5-5.6.2-6.33.1
Ссылки
- CVE-2020-24741
- SUSE Bug 1189408
Описание
An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. When a SVG file with an image inside it is rendered, a QTextLayout buffer overflow can be triggered.
Затронутые продукты
Image SLES12-SP5-Azure-SAP-BYOS:libQt5Core5-5.6.2-6.33.1
Image SLES12-SP5-Azure-SAP-BYOS:libQt5DBus5-5.6.2-6.33.1
Image SLES12-SP5-Azure-SAP-BYOS:libQt5Gui5-5.6.2-6.33.1
Image SLES12-SP5-Azure-SAP-BYOS:libQt5Network5-5.6.2-6.33.1
Ссылки
- CVE-2023-32763
- SUSE Bug 1211798
- SUSE Bug 1212745