Lucene search

K
mageiaGentoo FoundationMGASA-2019-0356
HistoryDec 06, 2019 - 5:15 p.m.

Updated QT stack fix security vulnerability

2019-12-0617:15:42
Gentoo Foundation
advisories.mageia.org
8

0.008 Low

EPSS

Percentile

81.8%

This update provides the 5.12.6 QT stack maintenance release and fixes the following security issue: An out-of-bounds memory access in the generateDirectionalRuns() function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attackers to cause a denial of service by crashing an application via a text file containing many directional characters (CVE-2019-18281). kwin and skrooge has been rebuilt to pick up proper dependencies on the updated QT packages.