Important: Red Hat Security Advisory: qt5-qtbase security update

An update for qt5-qtbase is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

qt:qtbase_network_ssl_qsslcertificate_qsslcertificate_pem: Heap-use-after-free in auto QtPrivate::sequential_erase<QList<QFactoryLoader*>, QFactoryLoader*>

Detailed Report: https://oss-fuzz.com/testcase?key=5175650636398592 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbasenetworksslqsslcertificateqsslcertificatepem Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf3000a1c Crash State:...

qt:qtbase_gui_painting_qcolorspace_fromiccprofile: Heap-buffer-overflow in unsigned int simdSwapLoop<unsigned short>

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=4702651155611648 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguipaintingqcolorspacefromiccprofile Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash...

CVE-2019-18281

An out-of-bounds memory access in the generateDirectionalRuns function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attackers to cause a denial of service by crashing an application via a text file containing many directional characters...

CVE-2019-18281

An out-of-bounds memory access in the generateDirectionalRuns function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attackers to cause a denial of service by crashing an application via a text file containing many directional characters...