SUSE-SU-2020:0319-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issue: Security issues fixed: - CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD bsc1161167. - CVE-2018-19870: Fixed an improper check in QImage allocation which could allow Denial of Service when opening crafted g...

SUSE-SU-2020:0318-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issue: Security issue fixed: - CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD bsc1161167. - CVE-2018-19870: Fixed an improper check in QImage allocation which could allow Denial of Service when opening crafted gi...

SUSE-SU-2020:0317-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: Security issues fixed: - CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD bsc1161167. - CVE-2018-19870: Fixed an improper check in QImage allocation which could allow Denial of Service when opening crafted...

Debian DLA-2092-1 : qtbase-opensource-src security update

In Qt5's plugin loader code as found in qtbase-opensource-src, it was possible to side-load plugins from 'the' local folder in addition to a system-widely defined library path. For Debian 8 'Jessie', this problem has been fixed in version 5.3.2+dfsg-4+deb8u4. We recommend that you upgrade your...

DSA-4617-1 qtbase-opensource-src - security update

Bulletin has no description...

[SECURITY] [DLA 2092-1] qtbase-opensource-src security update

Package : qtbase-opensource-src Version : 5.3.2+dfsg-4+deb8u4 CVE ID : CVE-2020-0569 In Qt5s plugin loader code as found in qtbase-opensource-src, it was possible to side-load plugins from "the" local folder in addition to a system-widely defined library path. For Debian 8 "Jessie", this problem...

DLA-2092-1 qtbase-opensource-src - security update

Bulletin has no description...

Debian: Security Advisory (DLA-2092-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NewStart CGSL CORE 5.05 / MAIN 5.05 : qt5-qtbase Multiple Vulnerabilities (NS-SA-2019-0236)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has qt5-qtbase packages installed that are affected by multiple vulnerabilities: - An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation...

NewStart CGSL CORE 5.04 / MAIN 5.04 : qt5-qtbase Multiple Vulnerabilities (NS-SA-2019-0217)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has qt5-qtbase packages installed that are affected by multiple vulnerabilities: - An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation...

qt5-qtbase security and bug fix update

qt5-qtbase 5.11-1-7 - Move libQt5EglFSDeviceIntegration lib out of the -devel subpkg Resolves: bz1692970 - Fix QImage allocaion failure Resolve: bz1667860 - Fix double free in QXmlStreamReader Resolve: bz1667858 - Fix segmentation fault on malformed BMP file Resolve: bz1667859 5.11.1-6 - Create a...

Arbitrary Code Execution

qt5-qtbase is vulnerable to arbitrary code execution. A segmentation fault in the QBmpHandler caused by a malicious BMP file allows arbitrary code execution in the system...

Arbitrary Code Execution

qt5-qtbase is vulnerable to arbitrary code execution. The vulnerability exists through a double free in QXmlStreamReader...

RHEL 8 : qt5-qtbase (RHSA-2019:3390)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3390 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt...

Debian: Security Advisory (DSA-4556-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4556-1 : qtbase-opensource-src - security update

An out-of-bounds memory access was discovered in the Qt library, which could result in denial of service through a text file containing many directional characters. The oldstable distribution stretch is not affected. C Tenable Network Security, Inc. The descriptive text and package checks in this...

DSA-4556-1 qtbase-opensource-src - security update

Bulletin has no description...

Qt QtBase Module CVE-2019-18281 Denial of Service Vulnerability

Description Qt QtBase module is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the application to crash, denying service to legitimate users. Qt QtBase module version 5.11.x and 5.12.x prior to 5.12.5 are vulnerable. Technologies Affected Qt Qt Base 5.11.0...

CVE-2019-18281

An out-of-bounds memory access in the generateDirectionalRuns function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attackers to cause a denial of service by crashing an application via a text file containing many directional characters...

CVE-2019-18281

An out-of-bounds memory access in the generateDirectionalRuns function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attackers to cause a denial of service by crashing an application via a text file containing many directional characters...