[SECURITY] Fedora 33 Update: qt5-qtsvg-5.15.2-3.fc33

Scalable Vector Graphics SVG is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displaying SVG drawings in widgets and on other paint devices...

[SECURITY] Fedora 33 Update: python-pillow-7.2.0-5.fc33

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt , devel developme...

[SECURITY] Fedora 32 Update: python-pillow-7.0.0-7.fc32

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt , devel developme...

MGASA-2021-0127 Updated gnuplot packages fix a security vulnerability

Double free when executing printsetoutput CVE-2020-25559. Additionally, a missing require for gnuplot has been added to gnuplot-qt package...

NewStart CGSL CORE 5.04 / MAIN 5.04 : qt Vulnerability (NS-SA-2021-0031)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has qt packages installed that are affected by a vulnerability: - An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. readxbmbody in gui/image/qxbmhandler.cpp has a buffer over-read...

Splash has a denial of service vulnerability

Splash is a JavaScript rendering service, a lightweight browser with an HTTP API, and it interfaces with the Twisted and QT libraries in Python. A denial of service vulnerability exists in Splash. An attacker can exploit this vulnerability to cause the program to crash...

qt:qtbase_gui_text_qtextdocument_sethtml: Crash in void QtPrivate::QMovableArrayOps<QVariant>::emplace<QVariant>

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=6219462548258816 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguitextqtextdocumentsethtml Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0ffffff0 Crash...

qt:qtsvg_svg_qsvgrenderer_render: Crash in qpaintengineex_lineTo

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5563629145554944 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x27800000 Crash State:...

qt:qtsvg_svg_qsvgrenderer_render: Crash in QOutlineMapper::convertPath

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=6401014875947008 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x24000000 Crash State:...

PT-2021-8283

Name of the Vulnerable Software and Affected Versions Qt affected versions not specified Description A flaw was found in Qt, specifically an out-of-bounds read vulnerability in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelper p.h. This issue may lead to unauthorized memory access when...

CVE-2021-3401

Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt program, as demonstrated by an x-scheme-handler/bitcoin handler for a .desktop file or a web browser. NOTE: the discoverer...

CVE-2021-3401

Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt program, as demonstrated by an x-scheme-handler/bitcoin handler for a .desktop file or a web browser. NOTE: the discoverer...

Digia QT has a binary vulnerability

Qt is a cross-platform C application development framework. A binary vulnerability exists in Digia QT, which can be exploited by attackers to cause a denial-of-service attack...

CVE-2021-3401: Improper Neutralization of Argument Delimiters in a Command

Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt program, as demonstrated by an x-scheme-handler/bitcoin handler for a .desktop file or a web browser. NOTE: the discoverer...

Fedora 32 : kf5-messagelib / qt5-qtwebengine (2021-bdaf015218)

The remote Fedora 32 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2021-bdaf015218 advisory. - This update rebases QtWebEngine to the latest Qt 5 release, 5.15.2, fixing dozens of security issues. The same version is already shipped on Fedora 33 and...

GLSA-202101-30 : Qt WebEngine: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202101-30 Qt WebEngine: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Qt WebEngine. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers...

Qt WebEngine: Multiple vulnerabilities

Background Library for rendering dynamic web content in Qt5 C++ and QML applications. Description Multiple vulnerabilities have been discovered in Qt WebEngine. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

PT-2021-28025

Name of the Vulnerable Software and Affected Versions Qt versions affected versions not specified Description The issue is related to a global buffer overflow read. Technical details about the crash indicate it occurs in the QSvgSwitch::draw function, which is called by QSvgTinyDocument::draw...

qt:qtbase_gui_text_qtextdocument_sethtml: Crash in QTextHtmlImporter::scanTable

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5272394031824896 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguitextqtextdocumentsethtml Job Type: libfuzzerasanqt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6288000079c0 Crash...

[SECURITY] Fedora 32 Update: python-pillow-7.0.0-5.fc32

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt , devel developme...