ALT-BU-2018-3079-1
Branch c7.1 update bulletin.
Closed vulnerabilities
Modified: 2021-03-23
BDU:2015-09779
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
Modified: 2025-04-12
CVE-2014-0190
The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
Modified: 2025-04-12
CVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
Modified: 2024-11-21
CVE-2015-1290
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
Modified: 2025-04-12
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
Closed bugs
Различное поведение библиотеки
Сделать пакет архитектуронезависимым
Package qt5-xmlpatterns updated to version 5.6.2-alt0.M70C.1 for branch c7.1 in task 200572.
Closed vulnerabilities
Modified: 2021-03-23
BDU:2015-09779
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
Modified: 2025-04-12
CVE-2014-0190
The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
Modified: 2025-04-12
CVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
Modified: 2024-11-21
CVE-2015-1290
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
Modified: 2025-04-12
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
Package qt5-declarative updated to version 5.6.2-alt0.M70C.1 for branch c7.1 in task 200572.
Closed vulnerabilities
Modified: 2021-03-23
BDU:2015-09779
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
Modified: 2025-04-12
CVE-2014-0190
The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
Modified: 2025-04-12
CVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
Modified: 2024-11-21
CVE-2015-1290
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
Modified: 2025-04-12
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
Closed vulnerabilities
Modified: 2021-03-23
BDU:2015-09779
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
Modified: 2025-04-12
CVE-2014-0190
The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
Modified: 2025-04-12
CVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
Modified: 2024-11-21
CVE-2015-1290
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
Modified: 2025-04-12
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
Package qt5-multimedia updated to version 5.6.2-alt0.M70C.1 for branch c7.1 in task 200572.
Closed vulnerabilities
Modified: 2021-03-23
BDU:2015-09779
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
Modified: 2025-04-12
CVE-2014-0190
The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
Modified: 2025-04-12
CVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
Modified: 2024-11-21
CVE-2015-1290
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
Modified: 2025-04-12
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
Package qt5-location updated to version 5.6.2-alt0.M70C.1 for branch c7.1 in task 200572.
Closed vulnerabilities
Modified: 2021-03-23
BDU:2015-09779
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
Modified: 2025-04-12
CVE-2014-0190
The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
Modified: 2025-04-12
CVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
Modified: 2024-11-21
CVE-2015-1290
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
Modified: 2025-04-12
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
Package qt5-sensors updated to version 5.6.2-alt0.M70C.1 for branch c7.1 in task 200572.
Closed vulnerabilities
Modified: 2021-03-23
BDU:2015-09779
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
Modified: 2025-04-12
CVE-2014-0190
The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
Modified: 2025-04-12
CVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
Modified: 2024-11-21
CVE-2015-1290
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
Modified: 2025-04-12
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
Package qt5-quickcontrols updated to version 5.6.2-alt0.M70C.1 for branch c7.1 in task 200572.
Closed vulnerabilities
Modified: 2021-03-23
BDU:2015-09779
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
Modified: 2025-04-12
CVE-2014-0190
The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
Modified: 2025-04-12
CVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
Modified: 2024-11-21
CVE-2015-1290
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
Modified: 2025-04-12
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
Package qt5-webkit updated to version 5.6.2-alt0.M70C.1 for branch c7.1 in task 200572.
Closed vulnerabilities
Modified: 2025-04-20
CVE-2015-8079
qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db.
- http://www.openwall.com/lists/oss-security/2015/11/05/4
- https://bugzilla.redhat.com/show_bug.cgi?id=1204795
- https://codereview.qt-project.org/#/c/108936/
- http://www.openwall.com/lists/oss-security/2015/11/05/4
- https://bugzilla.redhat.com/show_bug.cgi?id=1204795
- https://codereview.qt-project.org/#/c/108936/
Package qt5-script updated to version 5.6.2-alt0.M70C.1 for branch c7.1 in task 200572.
Closed vulnerabilities
Modified: 2021-03-23
BDU:2015-09779
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
Modified: 2025-04-12
CVE-2014-0190
The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
Modified: 2025-04-12
CVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
Modified: 2024-11-21
CVE-2015-1290
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
Modified: 2025-04-12
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
Package qt5-quick1 updated to version 5.6.2-alt0.M70C.1 for branch c7.1 in task 200572.
Closed vulnerabilities
Modified: 2021-03-23
BDU:2015-09779
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
Modified: 2025-04-12
CVE-2014-0190
The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
Modified: 2025-04-12
CVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
Modified: 2024-11-21
CVE-2015-1290
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
Modified: 2025-04-12
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
Package qt5-x11extras updated to version 5.6.2-alt0.M70C.1 for branch c7.1 in task 200572.
Closed vulnerabilities
Modified: 2021-03-23
BDU:2015-09779
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
Modified: 2025-04-12
CVE-2014-0190
The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
Modified: 2025-04-12
CVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
Modified: 2024-11-21
CVE-2015-1290
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
Modified: 2025-04-12
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
Package qt5-imageformats updated to version 5.6.2-alt1.M70C.1 for branch c7.1 in task 200572.
Closed vulnerabilities
Modified: 2021-03-23
BDU:2015-09779
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
Modified: 2025-04-12
CVE-2014-0190
The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
Modified: 2025-04-12
CVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
Modified: 2024-11-21
CVE-2015-1290
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
Modified: 2025-04-12
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
Closed vulnerabilities
Modified: 2021-03-23
BDU:2015-09779
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
Modified: 2025-04-12
CVE-2014-0190
The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
Modified: 2025-04-12
CVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
Modified: 2024-11-21
CVE-2015-1290
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
Modified: 2025-04-12
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
Package qt5-connectivity updated to version 5.6.2-alt0.M70C.1 for branch c7.1 in task 200572.
Closed vulnerabilities
Modified: 2021-03-23
BDU:2015-09779
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
Modified: 2025-04-12
CVE-2014-0190
The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
Modified: 2025-04-12
CVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
Modified: 2024-11-21
CVE-2015-1290
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
Modified: 2025-04-12
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
Package qt5-serialport updated to version 5.6.2-alt0.M70C.1 for branch c7.1 in task 200572.
Closed vulnerabilities
Modified: 2021-03-23
BDU:2015-09779
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
Modified: 2025-04-12
CVE-2014-0190
The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
Modified: 2025-04-12
CVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
Modified: 2024-11-21
CVE-2015-1290
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
Modified: 2025-04-12
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
Package qt5-translations updated to version 5.6.2-alt0.M70C.1 for branch c7.1 in task 200572.
Closed vulnerabilities
Modified: 2021-03-23
BDU:2015-09779
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
Modified: 2025-04-12
CVE-2014-0190
The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134040.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134141.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2014-April/000045.html
- http://www.securityfocus.com/bid/67087
- http://www.ubuntu.com/usn/USN-2626-1
- https://bugs.kde.org/show_bug.cgi?id=333404
Modified: 2025-04-12
CVE-2015-0295
The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html
- http://lists.qt-project.org/pipermail/announce/2015-February/000059.html
- http://www.securityfocus.com/bid/73029
- http://www.ubuntu.com/usn/USN-2626-1
Modified: 2024-11-21
CVE-2015-1290
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
- http://code.qt.io/cgit/qt/qtwebengine.git/tree/dist/changes-5.5.1
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00116.html
- http://www.nsfocus.net/index.php?act=advisory&do=view&adv_id=80
- https://bugs.chromium.org/p/chromium/issues/detail?id=505374
- https://codereview.chromium.org/1233453004
Modified: 2025-04-12
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74309
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108312/
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74307
- http://www.securityfocus.com/bid/74310
- http://www.ubuntu.com/usn/USN-2626-1
- https://security.gentoo.org/glsa/201603-10
Modified: 2025-04-12
CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- http://www.securityfocus.com/bid/74302
- http://www.ubuntu.com/usn/USN-2626-1
- https://codereview.qt-project.org/#/c/108248/
- https://security.gentoo.org/glsa/201603-10
Package owncloud-client updated to version 2.4.0-alt3.M70C.1.1 for branch c7.1 in task 200572.
Closed bugs
Просьба обновить клиента owncloud
Package kernel-image-un-def updated to version 4.9.82-alt0.M70C.1 for branch c7.1 in task 200712.
Closed vulnerabilities
Modified: 2023-03-13
BDU:2021-04144
Уязвимость функции dccp_disconnect (net/dccp/proto.c) ядра операционной системы Linux, позволяющая нарушителю выполнить произвольный код
Modified: 2025-04-20
CVE-2017-8824
The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state.
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
- http://lists.openwall.net/netdev/2017/12/04/224
- http://www.openwall.com/lists/oss-security/2017/12/05/1
- http://www.securityfocus.com/bid/102056
- https://access.redhat.com/errata/RHSA-2018:0399
- https://access.redhat.com/errata/RHSA-2018:0676
- https://access.redhat.com/errata/RHSA-2018:1062
- https://access.redhat.com/errata/RHSA-2018:1130
- https://access.redhat.com/errata/RHSA-2018:1170
- https://access.redhat.com/errata/RHSA-2018:1216
- https://access.redhat.com/errata/RHSA-2018:1319
- https://access.redhat.com/errata/RHSA-2018:3822
- https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
- https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
- https://usn.ubuntu.com/3581-1/
- https://usn.ubuntu.com/3581-2/
- https://usn.ubuntu.com/3581-3/
- https://usn.ubuntu.com/3582-1/
- https://usn.ubuntu.com/3582-2/
- https://usn.ubuntu.com/3583-1/
- https://usn.ubuntu.com/3583-2/
- https://www.debian.org/security/2017/dsa-4073
- https://www.debian.org/security/2018/dsa-4082
- https://www.exploit-db.com/exploits/43234/
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
- http://lists.openwall.net/netdev/2017/12/04/224
- http://www.openwall.com/lists/oss-security/2017/12/05/1
- http://www.securityfocus.com/bid/102056
- https://access.redhat.com/errata/RHSA-2018:0399
- https://access.redhat.com/errata/RHSA-2018:0676
- https://access.redhat.com/errata/RHSA-2018:1062
- https://access.redhat.com/errata/RHSA-2018:1130
- https://access.redhat.com/errata/RHSA-2018:1170
- https://access.redhat.com/errata/RHSA-2018:1216
- https://access.redhat.com/errata/RHSA-2018:1319
- https://access.redhat.com/errata/RHSA-2018:3822
- https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
- https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
- https://usn.ubuntu.com/3581-1/
- https://usn.ubuntu.com/3581-2/
- https://usn.ubuntu.com/3581-3/
- https://usn.ubuntu.com/3582-1/
- https://usn.ubuntu.com/3582-2/
- https://usn.ubuntu.com/3583-1/
- https://usn.ubuntu.com/3583-2/
- https://www.debian.org/security/2017/dsa-4073
- https://www.debian.org/security/2018/dsa-4082
- https://www.exploit-db.com/exploits/43234/