SUSE-SU-2024:2882-1

Опубликовано: 12 авг. 2024

Источник: suse-cvrf

Описание

Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues:

CVE-2023-45935: Fixed NULL pointer dereference in QXcbConnection::initializeAllAtoms() due to anomalous behavior from the X server (bsc#1222120)
CVE-2024-39936: Fixed information leakage due to process HTTP2 communication before encrypted() can be responded to (bsc#1227426)

Список пакетов

Container containers/open-webui:0

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5OpenGL5-5.15.12+kde151-150600.3.6.1

libQt5Test5-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

Image SLES15-SP6-SAP-BYOS

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

Image SLES15-SP6-SAP-BYOS-Azure

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

Image SLES15-SP6-SAP-BYOS-EC2

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

Image SLES15-SP6-SAP-BYOS-GCE

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

Image SLES15-SP6-SAP-Hardened

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

Image SLES15-SP6-SAP-Hardened-Azure

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

Image SLES15-SP6-SAP-Hardened-BYOS

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

Image SLES15-SP6-SAP-Hardened-EC2

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

Image SLES15-SP6-SAP-Hardened-GCE

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

SUSE Linux Enterprise Module for Basesystem 15 SP6

libQt5Concurrent-devel-5.15.12+kde151-150600.3.6.1

libQt5Concurrent5-5.15.12+kde151-150600.3.6.1

libQt5Core-devel-5.15.12+kde151-150600.3.6.1

libQt5Core-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5DBus-devel-5.15.12+kde151-150600.3.6.1

libQt5DBus-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5Gui-devel-5.15.12+kde151-150600.3.6.1

libQt5Gui-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5KmsSupport-devel-static-5.15.12+kde151-150600.3.6.1

libQt5KmsSupport-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5Network-devel-5.15.12+kde151-150600.3.6.1

libQt5Network-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5OpenGL-devel-5.15.12+kde151-150600.3.6.1

libQt5OpenGL-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5OpenGL5-5.15.12+kde151-150600.3.6.1

libQt5PlatformHeaders-devel-5.15.12+kde151-150600.3.6.1

libQt5PlatformSupport-devel-static-5.15.12+kde151-150600.3.6.1

libQt5PlatformSupport-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5PrintSupport-devel-5.15.12+kde151-150600.3.6.1

libQt5PrintSupport-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5PrintSupport5-5.15.12+kde151-150600.3.6.1

libQt5Sql-devel-5.15.12+kde151-150600.3.6.1

libQt5Sql-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5Sql5-5.15.12+kde151-150600.3.6.1

libQt5Sql5-sqlite-5.15.12+kde151-150600.3.6.1

libQt5Test-devel-5.15.12+kde151-150600.3.6.1

libQt5Test-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5Test5-5.15.12+kde151-150600.3.6.1

libQt5Widgets-devel-5.15.12+kde151-150600.3.6.1

libQt5Widgets-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

libQt5Xml-devel-5.15.12+kde151-150600.3.6.1

libQt5Xml5-5.15.12+kde151-150600.3.6.1

libqt5-qtbase-common-devel-5.15.12+kde151-150600.3.6.1

libqt5-qtbase-devel-5.15.12+kde151-150600.3.6.1

libqt5-qtbase-private-headers-devel-5.15.12+kde151-150600.3.6.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP6

libQt5OpenGLExtensions-devel-static-5.15.12+kde151-150600.3.6.1

libQt5Sql5-mysql-5.15.12+kde151-150600.3.6.1

libQt5Sql5-postgresql-5.15.12+kde151-150600.3.6.1

libQt5Sql5-unixODBC-5.15.12+kde151-150600.3.6.1

libqt5-qtbase-platformtheme-gtk3-5.15.12+kde151-150600.3.6.1

openSUSE Leap 15.6

libQt5Bootstrap-devel-static-5.15.12+kde151-150600.3.6.1

libQt5Bootstrap-devel-static-32bit-5.15.12+kde151-150600.3.6.1

libQt5Concurrent-devel-5.15.12+kde151-150600.3.6.1

libQt5Concurrent-devel-32bit-5.15.12+kde151-150600.3.6.1

libQt5Concurrent5-5.15.12+kde151-150600.3.6.1

libQt5Concurrent5-32bit-5.15.12+kde151-150600.3.6.1

libQt5Core-devel-5.15.12+kde151-150600.3.6.1

libQt5Core-devel-32bit-5.15.12+kde151-150600.3.6.1

libQt5Core-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5Core5-5.15.12+kde151-150600.3.6.1

libQt5Core5-32bit-5.15.12+kde151-150600.3.6.1

libQt5DBus-devel-5.15.12+kde151-150600.3.6.1

libQt5DBus-devel-32bit-5.15.12+kde151-150600.3.6.1

libQt5DBus-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5DBus5-5.15.12+kde151-150600.3.6.1

libQt5DBus5-32bit-5.15.12+kde151-150600.3.6.1

libQt5Gui-devel-5.15.12+kde151-150600.3.6.1

libQt5Gui-devel-32bit-5.15.12+kde151-150600.3.6.1

libQt5Gui-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5Gui5-5.15.12+kde151-150600.3.6.1

libQt5Gui5-32bit-5.15.12+kde151-150600.3.6.1

libQt5KmsSupport-devel-static-5.15.12+kde151-150600.3.6.1

libQt5KmsSupport-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5Network-devel-5.15.12+kde151-150600.3.6.1

libQt5Network-devel-32bit-5.15.12+kde151-150600.3.6.1

libQt5Network-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5Network5-5.15.12+kde151-150600.3.6.1

libQt5Network5-32bit-5.15.12+kde151-150600.3.6.1

libQt5OpenGL-devel-5.15.12+kde151-150600.3.6.1

libQt5OpenGL-devel-32bit-5.15.12+kde151-150600.3.6.1

libQt5OpenGL-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5OpenGL5-5.15.12+kde151-150600.3.6.1

libQt5OpenGL5-32bit-5.15.12+kde151-150600.3.6.1

libQt5OpenGLExtensions-devel-static-5.15.12+kde151-150600.3.6.1

libQt5OpenGLExtensions-devel-static-32bit-5.15.12+kde151-150600.3.6.1

libQt5PlatformHeaders-devel-5.15.12+kde151-150600.3.6.1

libQt5PlatformSupport-devel-static-5.15.12+kde151-150600.3.6.1

libQt5PlatformSupport-devel-static-32bit-5.15.12+kde151-150600.3.6.1

libQt5PlatformSupport-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5PrintSupport-devel-5.15.12+kde151-150600.3.6.1

libQt5PrintSupport-devel-32bit-5.15.12+kde151-150600.3.6.1

libQt5PrintSupport-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5PrintSupport5-5.15.12+kde151-150600.3.6.1

libQt5PrintSupport5-32bit-5.15.12+kde151-150600.3.6.1

libQt5Sql-devel-5.15.12+kde151-150600.3.6.1

libQt5Sql-devel-32bit-5.15.12+kde151-150600.3.6.1

libQt5Sql-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5Sql5-5.15.12+kde151-150600.3.6.1

libQt5Sql5-32bit-5.15.12+kde151-150600.3.6.1

libQt5Sql5-mysql-5.15.12+kde151-150600.3.6.1

libQt5Sql5-mysql-32bit-5.15.12+kde151-150600.3.6.1

libQt5Sql5-postgresql-5.15.12+kde151-150600.3.6.1

libQt5Sql5-postgresql-32bit-5.15.12+kde151-150600.3.6.1

libQt5Sql5-sqlite-5.15.12+kde151-150600.3.6.1

libQt5Sql5-sqlite-32bit-5.15.12+kde151-150600.3.6.1

libQt5Sql5-unixODBC-5.15.12+kde151-150600.3.6.1

libQt5Sql5-unixODBC-32bit-5.15.12+kde151-150600.3.6.1

libQt5Test-devel-5.15.12+kde151-150600.3.6.1

libQt5Test-devel-32bit-5.15.12+kde151-150600.3.6.1

libQt5Test-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5Test5-5.15.12+kde151-150600.3.6.1

libQt5Test5-32bit-5.15.12+kde151-150600.3.6.1

libQt5Widgets-devel-5.15.12+kde151-150600.3.6.1

libQt5Widgets-devel-32bit-5.15.12+kde151-150600.3.6.1

libQt5Widgets-private-headers-devel-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-5.15.12+kde151-150600.3.6.1

libQt5Widgets5-32bit-5.15.12+kde151-150600.3.6.1

libQt5Xml-devel-5.15.12+kde151-150600.3.6.1

libQt5Xml-devel-32bit-5.15.12+kde151-150600.3.6.1

libQt5Xml5-5.15.12+kde151-150600.3.6.1

libQt5Xml5-32bit-5.15.12+kde151-150600.3.6.1

libqt5-qtbase-common-devel-5.15.12+kde151-150600.3.6.1

libqt5-qtbase-devel-5.15.12+kde151-150600.3.6.1

libqt5-qtbase-examples-5.15.12+kde151-150600.3.6.1

libqt5-qtbase-examples-32bit-5.15.12+kde151-150600.3.6.1

libqt5-qtbase-platformtheme-gtk3-5.15.12+kde151-150600.3.6.1

libqt5-qtbase-platformtheme-xdgdesktopportal-5.15.12+kde151-150600.3.6.1

libqt5-qtbase-private-headers-devel-5.15.12+kde151-150600.3.6.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20242882-1/
Link for SUSE-SU-2024:2882-1
https://lists.suse.com/pipermail/sle-security-updates/2024-August/019171.html
E-Mail link for SUSE-SU-2024:2882-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1222120
SUSE Bug 1222120
https://bugzilla.suse.com/1227426
SUSE Bug 1227426
https://www.suse.com/security/cve/CVE-2023-45935/
SUSE CVE CVE-2023-45935 page
https://www.suse.com/security/cve/CVE-2024-39936/
SUSE CVE CVE-2024-39936 page

Описание

** DISPUTED ** Qt 6 through 6.6 was discovered to contain a NULL pointer dereference via the function QXcbConnection::initializeAllAtoms(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server.

Затронутые продукты

Container containers/open-webui:0:libQt5Core5-5.15.12+kde151-150600.3.6.1

Container containers/open-webui:0:libQt5DBus5-5.15.12+kde151-150600.3.6.1

Container containers/open-webui:0:libQt5Gui5-5.15.12+kde151-150600.3.6.1

Container containers/open-webui:0:libQt5Network5-5.15.12+kde151-150600.3.6.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-45935.html
CVE-2023-45935
https://bugzilla.suse.com/1222120
SUSE Bug 1222120

Описание

An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed..

Затронутые продукты

Container containers/open-webui:0:libQt5Core5-5.15.12+kde151-150600.3.6.1

Container containers/open-webui:0:libQt5DBus5-5.15.12+kde151-150600.3.6.1

Container containers/open-webui:0:libQt5Gui5-5.15.12+kde151-150600.3.6.1

Container containers/open-webui:0:libQt5Network5-5.15.12+kde151-150600.3.6.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-39936.html
CVE-2024-39936
https://bugzilla.suse.com/1227426
SUSE Bug 1227426

SUSE-SU-2024:2882-1

Описание

Список пакетов

Container containers/open-webui:0

Image SLES15-SP6-SAP-Azure-LI-BYOS

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

Image SLES15-SP6-SAP-Azure-VLI-BYOS

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP6-SAP-BYOS

Image SLES15-SP6-SAP-BYOS-Azure

Image SLES15-SP6-SAP-BYOS-EC2

Image SLES15-SP6-SAP-BYOS-GCE

Image SLES15-SP6-SAP-Hardened

Image SLES15-SP6-SAP-Hardened-Azure

Image SLES15-SP6-SAP-Hardened-BYOS

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

Image SLES15-SP6-SAP-Hardened-EC2

Image SLES15-SP6-SAP-Hardened-GCE

SUSE Linux Enterprise Module for Basesystem 15 SP6

SUSE Linux Enterprise Module for Desktop Applications 15 SP6

openSUSE Leap 15.6

Ссылки

Уязвимость: CVE-2023-45935

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-39936

Описание

Затронутые продукты

Ссылки