Lucene search

K
oraclelinuxOracleLinuxELSA-2023-6369
HistoryNov 12, 2023 - 12:00 a.m.

qt5 security and bug fix update

2023-11-1200:00:00
linux.oracle.com
6
qt5
security
bugfix
adwaita-qt
python-pyqt5-sip
python-qt5
qgnomeplatform
qt5-doc
qt5-qt3d
qt5-qtbase
qt5-qtconnectivity
qt5-qtdeclarative
qt5-qtdoc
qt5-qtgraphicaleffects
qt5-qtimageformats
qt5-qtlocation
qt5-qtmultimedia
qt5-qtquickcontrols2
qt5-qtquickcontrols
qt5-qtscript
qt5-qtsensors
qt5-qtserialbus
qt5-qtserialport
qt5-qtsvg
qt5-qttools
qt5-qttranslations
qt5-qtwayland
qt5-qtwebchannel
qt5-qtwebsockets
qt5-qtx11extras
qt5-qtxmlpatterns
unix

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.9 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

44.3%

adwaita-qt
[1.4.2-1]

  • 1.4.2
    Resolves: bz#2175754
    python-pyqt5-sip
    [12.11.1-1]
  • 12.11.1
    Resolves: bz#2188589
    python-qt5
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175758
    qgnomeplatform
    [0.9.0-1]
  • 0.9.0
    Resolves: bz#2175753
    qt5
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175724
    qt5-doc
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175726
    qt5-qt3d
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175729
    qt5-qtbase
    [5.15.9-7]
  • Fix infinite loops in QXmlStreamReader (CVE-2023-38197)
    Resolves: bz#2222771
    [5.15.9-6]
  • Don’t allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212754
    [5.15.9-5]
  • Don’t allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212754
    [5.15.9-4]
  • Fix specific overflow in qtextlayout
  • Fix incorrect parsing of the strict-transport-security (HSTS) header
  • Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209492
    [5.15.9-3]
  • Rebuild (elfutils#2188064)
    Resolves: bz#2175727
    [5.15.9-2]
  • Disable tests failing in gating
    Resolves: bz#2175727
    [5.15.9-1]
  • 5.15.9 + sync with Fedora
    Resolves: bz#2175727
    qt5-qtconnectivity
    [5.15.9-2]
  • Rebuild (elfutils#2188064)
    Resolves: bz#2175730
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175730
    qt5-qtdeclarative
    [5.15.9-3]
  • Rebuild (elfutils#2188064)
    Resolves: bz#2175728
    [5.15.9-2]
  • Disable tests failing in gating
    Resolves: bz#2175728
    [5.15.9-1]
  • 5.15.9 + sync with Fedora
    Resolves: bz#2178624
    Resolves: bz#2175728
    qt5-qtdoc
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175731
    qt5-qtgraphicaleffects
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175733
    qt5-qtimageformats
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175734
    qt5-qtlocation
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175735
    qt5-qtmultimedia
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175736
    qt5-qtquickcontrols2
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175738
    qt5-qtquickcontrols
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175737
    qt5-qtscript
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175745
    qt5-qtsensors
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175739
    qt5-qtserialbus
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175740
    qt5-qtserialport
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175741
    qt5-qtsvg
    [5.15.9-2]
  • Fix uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)
    Resolves: bz#2208140
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175742
    qt5-qttools
    [5.15.9-3]
  • Rebuild (LLVM-16)
    Resolves: bz#2192954
    [5.15.9-2]
  • Rebuild (elfutils#2188064)
    Resolves: bz#2175743
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175743
    qt5-qttranslations
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175744
    qt5-qtwayland
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175746
    qt5-qtwebchannel
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175747
    qt5-qtwebsockets
    [5.15.9-2]
  • Move QML imports out of -devel subpackage
    Resolves: bz#2175749
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175749
    qt5-qtx11extras
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175750
    qt5-qtxmlpatterns
    [5.15.9-2]
  • Rebuild (elfutils#2188064)
    Resolves: bz#2175751
    [5.15.9-1]
  • 5.15.9
    Resolves: bz#2175751

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.9 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

44.3%