[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250053

 
 

909

 
 

195940

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2020:1665-01 -- Redhat python-qt5, qgnomeplatform, qt5, qt5-qt3d, qt5-qtbase, qt5-qtcanvas3d, qt5-qtconnectivity, qt5-qtdeclarative, qt5-qtdoc, qt5-qtgraphicaleffects, qt5-qtimageformats, qt5-qtlocation, qt5-qtmultimedia, qt5-qtquickcontrols, qt5-qtquickcontrols2, qt5-qtscript, qt5-qtsensors, qt5-qtserialbus, qt5-qtserialport, qt5-qtsvg, qt5-qttools, qt5-qttranslations, qt5-qtwayland, qt5-qtwebchannel, qt5-qtwebsockets, qt5-qtx11extras, qt5-qtxmlpatterns, sip

ID: oval:org.secpod.oval:def:66827Date: (C)2020-11-09   (M)2022-10-10
Class: PATCHFamily: unix




Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. The following packages have been upgraded to a later upstream version: qt5 , qt5-qt3d , qt5-qtbase , qt5-qtcanvas3d , qt5-qtconnectivity , qt5-qtdeclarative , qt5-qtdoc , qt5-qtgraphicaleffects , qt5-qtimageformats , qt5-qtlocation , qt5-qtmultimedia , qt5-qtquickcontrols , qt5-qtquickcontrols2 , qt5-qtscript , qt5-qtsensors , qt5-qtserialbus , qt5-qtserialport , qt5-qtsvg , qt5-qttools , qt5-qttranslations , qt5-qtwayland , qt5-qtwebchannel , qt5-qtwebsockets , qt5-qtx11extras , qt5-qtxmlpatterns , python-qt5 , sip . Security Fix: * qt: Malformed PPM image causing division by zero and crash in qppmhandler.cpp * qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service * qt5-qtimageformats: QTgaFile CPU exhaustion For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Additional Changes: For detailed information on changes in this release, see the CentOS 8.2 Release Notes linked from the References section.

Platform:
CentOS 8
Product:
python-qt5
qgnomeplatform
qt5
qt5-qt3d
qt5-qtbase
qt5-qtcanvas3d
qt5-qtconnectivity
qt5-qtdeclarative
qt5-qtdoc
qt5-qtgraphicaleffects
qt5-qtimageformats
qt5-qtlocation
qt5-qtmultimedia
qt5-qtquickcontrols
qt5-qtquickcontrols2
qt5-qtscript
qt5-qtsensors
qt5-qtserialbus
qt5-qtserialport
qt5-qtsvg
qt5-qttools
qt5-qttranslations
qt5-qtwayland
qt5-qtwebchannel
qt5-qtwebsockets
qt5-qtx11extras
qt5-qtxmlpatterns
sip
Reference:
RHSA-2020:1665-01
CVE-2018-19869
CVE-2018-19871
CVE-2018-19872
CVE    3
CVE-2018-19872
CVE-2018-19871
CVE-2018-19869

© SecPod Technologies