SUSE: Security Advisory (SUSE-SU-2020:2924-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for qt5-qtsvg (FEDORA-2021-a95a40b78b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for qt5-qtsvg (FEDORA-2021-6167e8e205)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 33 : qt5-qtsvg (2021-6167e8e205)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-6167e8e205 advisory. - An out of bounds read in function QRadialFetchSimd from crafted svg file may lead to information disclosure or other potential consequences. This update...

qt:qtsvg_svg_qsvgrenderer_render: Crash in QRadialFetchSimd<QSimdSse2>::fetch

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5858607787802624 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerubsanqt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffe03435cd0 Crash...

qt:qtsvg_svg_qsvgrenderer_render: Crash in qpaintengineex_moveTo

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=6305231065448448 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x26800000 Crash State:...

qt:qtsvg_svg_qsvgrenderer_render: Crash in qpaintengineex_lineTo

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5563629145554944 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x27800000 Crash State:...

qt:qtsvg_svg_qsvgrenderer_render: Global-buffer-overflow in QSvgSwitch::draw

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5396155594833920 Project: qt Fuzzing Engine: honggfuzz Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: honggfuzzasanqt Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x0000026414...

NewStart CGSL CORE 5.05 / MAIN 5.05 : qt5-qtsvg Vulnerability (NS-SA-2020-0111)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has qt5-qtsvg packages installed that are affected by a vulnerability: - An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp. CVE-2018-19869 Note that Nessus has not...

SUSE SLES12 Security Update : libqt5-qtsvg (SUSE-SU-2020:2924-1)

This update for libqt5-qtsvg fixes the following issues : Security issues fixed : CVE-2018-19869: Fixed Denial of Service when parsing malformed URL reference bsc1118599 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

Debian: Security Advisory (DLA-2422-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2422-1 : qtsvg-opensource-src security update

Malformed SVG images were able to cause a segmentation fault in qtsvg-opensource-src, the QtSvg module for displaying the contents of SVG files in Qt. For Debian 9 stretch, this problem has been fixed in version 5.7.120161021-2.1. We recommend that you upgrade your qtsvg-opensource-src packages...

[SECURITY] [DLA 2422-1] qtsvg-opensource-src security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2422-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk October 31, 2020 https://wiki.debian.org/LTS -...

DLA-2422-1 qtsvg-opensource-src - security update

Bulletin has no description...

SUSE-SU-2020:2924-1 Security update for libqt5-qtsvg

This update for libqt5-qtsvg fixes the following issues: Security issues fixed: - CVE-2018-19869: Fixed Denial of Service when parsing malformed URL reference bsc1118599...

NewStart CGSL CORE 5.04 / MAIN 5.04 : qt5-qtsvg Vulnerability (NS-SA-2020-0042)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has qt5-qtsvg packages installed that are affected by a vulnerability: - An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp. CVE-2018-19869 Note that Nessus has not...

AZL-6834 CVE-2020-0570 affecting package qt5-qtsvg for versions less than 5.12.11-3

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access...

AZL-6835 CVE-2020-13962 affecting package qt5-qtsvg for versions less than 5.12.11-3

Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails...

qt5 security, bug fix, and enhancement update

python-qt5 5.13.1-1 - 5.13.1 Resolves: bz1775603 qgnomeplatform 0.4-3 - Rebuild qt5 Resolves: bz1774418 qt5 5.12.5-3 - Re-add srpm macros, just leave them empty Resolves: bz1733133 5.12.5-2 - Drop srpm macros as we dont ship qtwebengine Resolves: bz1733133 5.12.5-1 - 5.12.5 + sync with Fedora...

Moderate: qt5 security, bug fix, and enhancement update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. The following packages have been upgraded to a later upstream version: qt5 5.12.5, qt5-qt3d 5.12.5, qt5-qtbase 5.12.5, qt5-qtcanvas3d 5.12.5,...