[SECURITY] Fedora 27 Update: calamares-3.1.8-2.fc27.1

Calamares is a distribution-independent installer framework, designed to in stall from a live CD/DVD/USB environment to a hard disk. It includes a graphical installation program based on Qt 5. This package includes the Calamares framework and the required configuration files to produce a working...

openSUSE Security Update : exempi (openSUSE-2018-1022)

This update for exempi fixes the following security issue : - CVE-2017-18236: The ASFSupport::ReadHeaderObject function allowed remote attackers to cause a denial of service infinite loop via a crafted .asf file bsc1085589 - CVE-2017-18233: Prevent integer overflow in the Chunk class that allowed...

PT-2020-6893

Name of the Vulnerable Software and Affected Versions Qt versions through 5.14.1 Description The issue is related to the WebSocket component of the Qt cross-platform software development framework, which is associated with unlimited resource allocation. This can be exploited by a remote attacker ...

DEBIAN-CVE-2018-17144

Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x through 0.16.x before 0.16.3 allow a remote denial of service application crash exploitable by miners via duplicate input. An attacker can make bitcoind or Bitcoin-Qt crash...

CVE-2018-17144

Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x through 0.16.x before 0.16.3 allow a remote denial of service application crash exploitable by miners via duplicate input. An attacker can make bitcoind or Bitcoin-Qt crash...

Security update for kbuild, virtualbox (important)

This update for kbuild, virtualbox fixes the following issues: kbuild changes: - Update to version 0.1.9998svn3110 - Do not assume glibc glob internals - Support GLIBC glob interface version 2 - Fix build failure boo1079838 - Fix build with GCC7 boo1039375 - Fix build by disabling vboxvideodrv.so...

PT-2018-3710

Name of the Vulnerable Software and Affected Versions Qt versions prior to 5.11.3 Description An issue was discovered in Qt, related to the QTgaFile component, which is associated with an error in the resource consumption control mechanism. This issue allows a remote attacker to cause a denial of...

[SECURITY] Fedora 28 Update: quazip-0.7.6-1.fc28

QuaZIP is a simple C++ wrapper over Gilles Vollant's ZIP/UNZIP package that can be used to access ZIP archives. It uses Trolltech's Qt toolkit. QuaZIP allows you to access files inside ZIP archives using QIODevice API, and - yes! - that means that you can also use QTextStream, QDataStream or...

PT-2018-2537

Name of the Vulnerable Software and Affected Versions Qt versions prior to 5.11.3 Description The issue is related to a double-free memory error in the QXMLStreamReader function of the QXmlStream component in the Qt cross-platform framework. This can be exploited by a remote attacker using a...

[SECURITY] Fedora 28 Update: wireshark-2.6.2-1.fc28

Metapackage with installs wireshark-cli and wireshark-qt...

PT-2018-3711

Name of the Vulnerable Software and Affected Versions Qt version 5.11 Description A issue in Qt 5.11 allows a remote attacker to cause a denial of service using a malformed PPM image, which results in a division by zero and a crash in the qppmhandler.cpp component. Recommendations For Qt version...

PT-2018-3709

Name of the Vulnerable Software and Affected Versions Qt versions prior to 5.11.3 Description The issue is related to a flaw in the input validation mechanism of the qsvghandler.cpp component in the Qt cross-platform framework. This flaw can be exploited by a remote attacker using a malformed SVG...

[SECURITY] Fedora 28 Update: qt3-3.3.8b-74.fc28

Qt is a GUI software toolkit which simplifies the task of writing and maintaining GUI Graphical User Interface applications for the X Window System. Qt is written in C++ and is fully object-oriented. This package contains the shared library needed to run Qt 3 applications, as well as the README...

[SECURITY] Fedora 27 Update: qt3-3.3.8b-74.fc27

Qt is a GUI software toolkit which simplifies the task of writing and maintaining GUI Graphical User Interface applications for the X Window System. Qt is written in C++ and is fully object-oriented. This package contains the shared library needed to run Qt 3 applications, as well as the README...

PT-2018-3969

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.12 Description The issue is related to an integer overflow error within the parse qt function in the internal/dcraw common.cpp component of the LibRaw image processing library. This error can be exploited to trigg...

[SECURITY] Fedora 28 Update: wireshark-2.6.1-1.fc28

Metapackage with installs wireshark-cli and wireshark-qt...

[ASA-201805-23] wireshark-qt: multiple issues

Arch Linux Security Advisory ASA-201805-23 ========================================== Severity: Critical Date : 2018-05-25 CVE-ID : CVE-2018-11354 CVE-2018-11355 CVE-2018-11356 CVE-2018-11357 CVE-2018-11358 CVE-2018-11359 CVE-2018-11360 CVE-2018-11361 CVE-2018-11362 Package : wireshark-qt Type :...

Fedora 27 : 1:wireshark (2018-cdf3f8e8b0)

Removing dependency on wireshark metapackage from wireshark-cli ---- Added wireshark-qt to wireshark metapackage ---- - New version 2.4.5 - Contains fixes for CVE-2018-7419, CVE-2018-7418, CVE-2018-7417, CVE-2018-7420, CVE-2018-7320, CVE-2018-7336, CVE-2018-7337, CVE-2018-7334, CVE-2018-7335,...

The vulnerability of the Libavcodec library, which is part of multimedia libraries like Ffmpeg, allows a hacker to execute arbitrary code.

The vulnerability of the Libavcodec library, which is part of multimedia libraries like Ffmpeg, exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially crafted QT file...

Code injection

An issue was discovered in Exempi before 2.4.4. The TradQTManager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTimeSupport.cpp allows remote attackers to cause a denial of service infinite loop via crafted XMP data in a .qt file...