SUSE-SU-2024:2976-1

Опубликовано: 20 авг. 2024

Источник: suse-cvrf

Описание

Security update for libqt5-qt3d

This update for libqt5-qt3d fixes the following issues:

CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp (bsc#1228204)

Other fixes:

Check for a nullptr returned from the shader manager
Fill image with transparency by default to avoid having junk if it's not filled properly before the first paint call
Fix QTextureAtlas parenting that could lead to crashes due to being used after free'd.

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

libQt53DAnimation-devel-5.15.2+kde39-150400.3.3.1

libQt53DAnimation5-5.15.2+kde39-150400.3.3.1

libQt53DCore-devel-5.15.2+kde39-150400.3.3.1

libQt53DCore5-5.15.2+kde39-150400.3.3.1

libQt53DExtras-devel-5.15.2+kde39-150400.3.3.1

libQt53DExtras5-5.15.2+kde39-150400.3.3.1

libQt53DInput-devel-5.15.2+kde39-150400.3.3.1

libQt53DInput5-5.15.2+kde39-150400.3.3.1

libQt53DLogic-devel-5.15.2+kde39-150400.3.3.1

libQt53DLogic5-5.15.2+kde39-150400.3.3.1

libQt53DQuick-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuick5-5.15.2+kde39-150400.3.3.1

libQt53DQuickAnimation-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickAnimation5-5.15.2+kde39-150400.3.3.1

libQt53DQuickExtras-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickExtras5-5.15.2+kde39-150400.3.3.1

libQt53DQuickInput-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickInput5-5.15.2+kde39-150400.3.3.1

libQt53DQuickRender-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickRender5-5.15.2+kde39-150400.3.3.1

libQt53DQuickScene2D-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickScene2D5-5.15.2+kde39-150400.3.3.1

libQt53DRender-devel-5.15.2+kde39-150400.3.3.1

libQt53DRender5-5.15.2+kde39-150400.3.3.1

libqt5-qt3d-devel-5.15.2+kde39-150400.3.3.1

libqt5-qt3d-imports-5.15.2+kde39-150400.3.3.1

libqt5-qt3d-private-headers-devel-5.15.2+kde39-150400.3.3.1

libqt5-qt3d-tools-5.15.2+kde39-150400.3.3.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

libQt53DAnimation-devel-5.15.2+kde39-150400.3.3.1

libQt53DAnimation5-5.15.2+kde39-150400.3.3.1

libQt53DCore-devel-5.15.2+kde39-150400.3.3.1

libQt53DCore5-5.15.2+kde39-150400.3.3.1

libQt53DExtras-devel-5.15.2+kde39-150400.3.3.1

libQt53DExtras5-5.15.2+kde39-150400.3.3.1

libQt53DInput-devel-5.15.2+kde39-150400.3.3.1

libQt53DInput5-5.15.2+kde39-150400.3.3.1

libQt53DLogic-devel-5.15.2+kde39-150400.3.3.1

libQt53DLogic5-5.15.2+kde39-150400.3.3.1

libQt53DQuick-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuick5-5.15.2+kde39-150400.3.3.1

libQt53DQuickAnimation-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickAnimation5-5.15.2+kde39-150400.3.3.1

libQt53DQuickExtras-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickExtras5-5.15.2+kde39-150400.3.3.1

libQt53DQuickInput-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickInput5-5.15.2+kde39-150400.3.3.1

libQt53DQuickRender-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickRender5-5.15.2+kde39-150400.3.3.1

libQt53DQuickScene2D-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickScene2D5-5.15.2+kde39-150400.3.3.1

libQt53DRender-devel-5.15.2+kde39-150400.3.3.1

libQt53DRender5-5.15.2+kde39-150400.3.3.1

libqt5-qt3d-devel-5.15.2+kde39-150400.3.3.1

libqt5-qt3d-imports-5.15.2+kde39-150400.3.3.1

libqt5-qt3d-private-headers-devel-5.15.2+kde39-150400.3.3.1

libqt5-qt3d-tools-5.15.2+kde39-150400.3.3.1

SUSE Linux Enterprise Server 15 SP4-LTSS

libQt53DAnimation-devel-5.15.2+kde39-150400.3.3.1

libQt53DAnimation5-5.15.2+kde39-150400.3.3.1

libQt53DCore-devel-5.15.2+kde39-150400.3.3.1

libQt53DCore5-5.15.2+kde39-150400.3.3.1

libQt53DExtras-devel-5.15.2+kde39-150400.3.3.1

libQt53DExtras5-5.15.2+kde39-150400.3.3.1

libQt53DInput-devel-5.15.2+kde39-150400.3.3.1

libQt53DInput5-5.15.2+kde39-150400.3.3.1

libQt53DLogic-devel-5.15.2+kde39-150400.3.3.1

libQt53DLogic5-5.15.2+kde39-150400.3.3.1

libQt53DQuick-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuick5-5.15.2+kde39-150400.3.3.1

libQt53DQuickAnimation-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickAnimation5-5.15.2+kde39-150400.3.3.1

libQt53DQuickExtras-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickExtras5-5.15.2+kde39-150400.3.3.1

libQt53DQuickInput-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickInput5-5.15.2+kde39-150400.3.3.1

libQt53DQuickRender-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickRender5-5.15.2+kde39-150400.3.3.1

libQt53DQuickScene2D-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickScene2D5-5.15.2+kde39-150400.3.3.1

libQt53DRender-devel-5.15.2+kde39-150400.3.3.1

libQt53DRender5-5.15.2+kde39-150400.3.3.1

libqt5-qt3d-devel-5.15.2+kde39-150400.3.3.1

libqt5-qt3d-imports-5.15.2+kde39-150400.3.3.1

libqt5-qt3d-private-headers-devel-5.15.2+kde39-150400.3.3.1

libqt5-qt3d-tools-5.15.2+kde39-150400.3.3.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

libQt53DAnimation-devel-5.15.2+kde39-150400.3.3.1

libQt53DAnimation5-5.15.2+kde39-150400.3.3.1

libQt53DCore-devel-5.15.2+kde39-150400.3.3.1

libQt53DCore5-5.15.2+kde39-150400.3.3.1

libQt53DExtras-devel-5.15.2+kde39-150400.3.3.1

libQt53DExtras5-5.15.2+kde39-150400.3.3.1

libQt53DInput-devel-5.15.2+kde39-150400.3.3.1

libQt53DInput5-5.15.2+kde39-150400.3.3.1

libQt53DLogic-devel-5.15.2+kde39-150400.3.3.1

libQt53DLogic5-5.15.2+kde39-150400.3.3.1

libQt53DQuick-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuick5-5.15.2+kde39-150400.3.3.1

libQt53DQuickAnimation-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickAnimation5-5.15.2+kde39-150400.3.3.1

libQt53DQuickExtras-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickExtras5-5.15.2+kde39-150400.3.3.1

libQt53DQuickInput-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickInput5-5.15.2+kde39-150400.3.3.1

libQt53DQuickRender-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickRender5-5.15.2+kde39-150400.3.3.1

libQt53DQuickScene2D-devel-5.15.2+kde39-150400.3.3.1

libQt53DQuickScene2D5-5.15.2+kde39-150400.3.3.1

libQt53DRender-devel-5.15.2+kde39-150400.3.3.1

libQt53DRender5-5.15.2+kde39-150400.3.3.1

libqt5-qt3d-devel-5.15.2+kde39-150400.3.3.1

libqt5-qt3d-imports-5.15.2+kde39-150400.3.3.1

libqt5-qt3d-private-headers-devel-5.15.2+kde39-150400.3.3.1

libqt5-qt3d-tools-5.15.2+kde39-150400.3.3.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20242976-1/
Link for SUSE-SU-2024:2976-1
https://lists.suse.com/pipermail/sle-security-updates/2024-August/019281.html
E-Mail link for SUSE-SU-2024:2976-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1228204
SUSE Bug 1228204
https://www.suse.com/security/cve/CVE-2024-40724/
SUSE CVE CVE-2024-40724 page

Описание

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product.

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libQt53DAnimation-devel-5.15.2+kde39-150400.3.3.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libQt53DAnimation5-5.15.2+kde39-150400.3.3.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libQt53DCore-devel-5.15.2+kde39-150400.3.3.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libQt53DCore5-5.15.2+kde39-150400.3.3.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-40724.html
CVE-2024-40724
https://bugzilla.suse.com/1228142
SUSE Bug 1228142

SUSE-SU-2024:2976-1

Описание

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

Ссылки

Уязвимость: CVE-2024-40724

Описание

Затронутые продукты

Ссылки