CentOS 7 : qt5-qtbase (RHSA-2020:4025)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4025 advisory. - Out of bounds write in IntelR PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via...

CentOS: Security Advisory for qt5-qtbase (CESA-2020:5021)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 7 : qt5-qtbase (RHSA-2020:4025)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4025 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt...

CentOS 7 : qt and qt5-qtbase (RHSA-2020:5021)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5021 advisory. - An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. readxbmbody in gui/image/qxbmhandler.cpp has a buffer over-read...

Oracle Linux 7 : qt / and / qt5-qtbase (ELSA-2020-5021)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5021 advisory. qt 1:4.8.7-9 - Fix buffer overflow in XBM parser Resolves: bz1870297 qt5-qtbase 5.9.7-5 - Fix buffer overflow in XBM parser Resolves: bz1870365 Tenable has...

RHEL 7 : qt and qt5-qtbase (RHSA-2020:5021)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5021 advisory. The qt packages contain a software toolkit that simplifies the task of writing and maintaining Graphical User Interface GUI applications for the X...

qt5-qtbase and qt5-qtwebsockets security and bug fix update

qt5-qtbase 5.12.5-6 - OpenSSL: handle SSLshutdowns errors properly Resolves: bz1851538 5.12.5-5 - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution Resolves: bz1814739 Resolves: bz1814683 - Fix: XML entity expansion vulnerability Resolves:...

Denial Of Service (DoS)

qt5 is vulnerable to denial of service. An incorrect call to SSLshutdown during mid-handshake causes a denial of service condition in TLS applications...

Denial Of Service (DoS)

qt5-qtwebsockets is vulnerable to denial of service. An insecure websocket implementation allows only limited size for frames and messages and allows an attacker to cause a denial of service...

Amazon Linux 2 : qt5-qtbase (ALAS-2020-1543)

The version of qt5-qtbase installed on the remote host is prior to 5.9.2-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1543 advisory. 2023-08-03: CVE-2020-24742 was added to this advisory. Files placed by attacker can influence the working directory and...

Scientific Linux Security Update : qt5-qtbase on SL7.x x86_64 (20201001)

Security Fixes : - qt: files placed by attacker can influence the working directory and lead to malicious code execution CVE-2020-0569 - qt: files placed by attacker can influence the working directory and lead to malicious code execution CVE-2020-0570 C Tenable Network Security, Inc. The...

NewStart CGSL CORE 5.04 / MAIN 5.04 : qt5-qtsvg Vulnerability (NS-SA-2020-0042)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has qt5-qtsvg packages installed that are affected by a vulnerability: - An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp. CVE-2018-19869 Note that Nessus has not...

qt5-qtbase security update

5.9.7-4 - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution Resolves: bz1814740 Resolves: bz1814685 5.9.7-3 - Fix multilib issue with qtcore-config.h header file Resolves: bz1534528 - Move libQt5EglFSDeviceIntegration lib into correct subpackag...

NewStart CGSL CORE 5.04 / MAIN 5.04 : qt5-qtimageformats Vulnerability (NS-SA-2020-0040)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has qt5-qtimageformats packages installed that are affected by a vulnerability: - An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption. CVE-2018-19871 Note that Nessus has not tested...

UPDATE: Ostinato 1.0

Ostinato 1.0 was released a while ago. I covered this open source tool some time ago in a post titled – Ostinato: The Network Traffic Generator and Analyzer! A lot has changed such as the code has now been ported to Qt5 with an improved UI for variable fields widget. What is Ostinato? Ostinato is...

qt5 security, bug fix, and enhancement update

python-qt5 5.13.1-1 - 5.13.1 Resolves: bz1775603 qgnomeplatform 0.4-3 - Rebuild qt5 Resolves: bz1774418 qt5 5.12.5-3 - Re-add srpm macros, just leave them empty Resolves: bz1733133 5.12.5-2 - Drop srpm macros as we dont ship qtwebengine Resolves: bz1733133 5.12.5-1 - 5.12.5 + sync with Fedora...

Fedora: Security Advisory for qt5-qtbase (FEDORA-2020-ca02c529f8)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 8 : qt5 (RHSA-2020:1665)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1665 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt...

ALSA-2020:1665 Moderate: qt5 security, bug fix, and enhancement update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. The following packages have been upgraded to a later upstream version: qt5 5.12.5, qt5-qt3d 5.12.5, qt5-qtbase 5.12.5, qt5-qtcanvas3d 5.12.5,...

RLSA-2020:1665 Moderate: qt5 security, bug fix, and enhancement update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. The following packages have been upgraded to a later upstream version: qt5 5.12.5, qt5-qt3d 5.12.5, qt5-qtbase 5.12.5, qt5-qtcanvas3d 5.12.5,...