Lucene search
OracleLinuxELSA-2020-4690HistoryNov 10, 2020 - 12:00 a.m.
qt5-qtbase and qt5-qtwebsockets security and bug fix update
2020-11-1000:00:00
linux.oracle.com
24
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
qt5-qtbase
[5.12.5-6]
- OpenSSL: handle SSL_shutdowns errors properly
Resolves: bz#1851538
[5.12.5-5] - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
Resolves: bz#1814739
Resolves: bz#1814683 - Fix: XML entity expansion vulnerability
Resolves: bz#1822193
qt5-qttools
[5.12.5-2] - Rebuild (LLVM-10)
Resolves: bz#1832857
qt5-qtwebsockets
[5.12.5-2] - Add a public api to set max frame and message size
Resolves: bz#1815187
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 8 | src | qt5-qtbase | < 5.12.5-6.el8 | qt5-qtbase-5.12.5-6.el8.src.rpm |
| oracle linux | 8 | src | qt5-qttools | < 5.12.5-2.el8 | qt5-qttools-5.12.5-2.el8.src.rpm |
| oracle linux | 8 | src | qt5-qtwebsockets | < 5.12.5-2.el8 | qt5-qtwebsockets-5.12.5-2.el8.src.rpm |
| oracle linux | 8 | aarch64 | qt5-assistant | < 5.12.5-2.el8 | qt5-assistant-5.12.5-2.el8.aarch64.rpm |
| oracle linux | 8 | aarch64 | qt5-designer | < 5.12.5-2.el8 | qt5-designer-5.12.5-2.el8.aarch64.rpm |
| oracle linux | 8 | aarch64 | qt5-doctools | < 5.12.5-2.el8 | qt5-doctools-5.12.5-2.el8.aarch64.rpm |
| oracle linux | 8 | aarch64 | qt5-linguist | < 5.12.5-2.el8 | qt5-linguist-5.12.5-2.el8.aarch64.rpm |
| oracle linux | 8 | aarch64 | qt5-qdbusviewer | < 5.12.5-2.el8 | qt5-qdbusviewer-5.12.5-2.el8.aarch64.rpm |
| oracle linux | 8 | aarch64 | qt5-qtbase | < 5.12.5-6.el8 | qt5-qtbase-5.12.5-6.el8.aarch64.rpm |
| oracle linux | 8 | noarch | qt5-qtbase-common | < 5.12.5-6.el8 | qt5-qtbase-common-5.12.5-6.el8.noarch.rpm |
Related
nessus
nessus
CentOS 8 : qt5-qtbase and qt5-qtwebsockets (CESA-2020:4690)
2021-02-01 00:00:00
RHEL 8 : qt5-qtbase and qt5-qtwebsockets (RHSA-2020:4690)
2020-11-04 00:00:00
Rocky Linux 8 : qt5-qtbase and qt5-qtwebsockets (RLSA-2020:4690)
2023-11-07 00:00:00
rocky
rocky
qt5-qtbase and qt5-qtwebsockets security and bug fix update
2020-11-03 12:27:18
osv
osv
Moderate: qt5-qtbase and qt5-qtwebsockets security and bug fix update
2020-11-03 12:27:18
Moderate: qt5-qtbase and qt5-qtwebsockets security and bug fix update
2020-11-03 12:27:18
CVE-2018-21035
2020-02-28 21:15:12
almalinux
almalinux
Moderate: qt5-qtbase and qt5-qtwebsockets security and bug fix update
2020-11-03 12:27:18
redhat
redhat
(RHSA-2020:4690) Moderate: qt5-qtbase and qt5-qtwebsockets security and bug fix update
2020-11-03 12:27:18
(RHSA-2020:4025) Moderate: qt5-qtbase security update
2020-09-29 07:52:26
openvas
openvas
Mageia: Security Advisory (MGASA-2020-0080)
2022-01-28 00:00:00
Fedora: Security Advisory for qt5-qtbase (FEDORA-2020-ca02c529f8)
2020-04-30 00:00:00
Mageia: Security Advisory (MGASA-2020-0192)
2022-01-28 00:00:00
debian
debian
[SECURITY] [DSA 4617-1] qtbase-opensource-src security update
2020-02-03 21:21:36
[SECURITY] [DLA 2092-1] qtbase-opensource-src security update
2020-02-01 00:51:19
oraclelinux
oraclelinux
qt5-qtbase security update
2020-10-06 00:00:00
mageia
mageia
Updated qtbase5 packages fix security vulnerabilities
2020-02-09 22:13:40
Updated qtbase5 packages fix security vulnerability
2020-05-05 15:20:37
Updated qtwebsockets5 packages fix a security vulnerability
2021-06-23 20:11:28
centos
centos
qt5 security update
2020-10-20 18:51:15
amazon
amazon
Medium: qt5-qtbase
2020-10-22 18:38:00
gentoo
gentoo
QtCore: Multiple vulnerabilities
2020-03-26 00:00:00
QtNetwork: Denial of service
2020-07-26 00:00:00
veracode
veracode
XML Entity Expansion (XEE)
2020-11-05 03:17:49
Denial Of Service (DoS)
2020-11-05 03:17:51
Denial Of Service (DoS)
2020-11-05 03:17:55
cbl_mariner
cbl_mariner
CVE-2015-9541 affecting package qt5-qtsvg 5.12.5-3
2022-04-26 19:57:36
CVE-2015-9541 affecting package qt5-qtbase 5.12.5-5
2021-08-12 21:14:37
CVE-2018-21035 affecting package qt5-qtsvg 5.12.11-4
2021-11-03 19:21:13
prion
prion
Memory corruption
2020-02-28 21:15:00
Code injection
2020-06-09 00:15:00
Design/Logic Flaw
2020-01-24 22:15:00
debiancve
debiancve
fedora
fedora
[SECURITY] Fedora 32 Update: qt5-qtbase-5.13.2-5.fc32
2020-04-25 02:32:19
[SECURITY] Fedora 31 Update: qt5-qtbase-5.13.2-3.fc31
2020-04-25 03:02:30
[SECURITY] Fedora 33 Update: mumble-1.3.2-1.fc33
2020-09-29 00:17:33
ubuntu
ubuntu
Qt vulnerabilities
2020-02-10 00:00:00
ubuntucve
ubuntucve
redhatcve
redhatcve
cve
cve
suse
suse
Security update for libqt5-qtbase (moderate)
2020-09-01 00:00:00
Security update for libqt5-qtbase (important)
2020-02-11 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1959
2021-07-02 18:04:13
intel
intel
Intel® PROSet/Wireless WiFi Software Advisory
2021-02-11 00:00:00
hp
hp
HPSBHF03684 rev. 2 - Intel® BIOS September 2020 Security Updates
2020-09-04 00:00:00
lenovo
lenovo
Intel BIOS Advisory - Lenovo Support US
2020-09-06 17:53:22
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related for ELSA-2020-4690