ALT-BU-2019-3953-1
Branch c8.1 update bulletin.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-declarative updated to version 5.12.4-alt1.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-xmlpatterns updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-websockets updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-multimedia updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-serialport updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-location updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-sensors updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-webchannel updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-quickcontrols updated to version 5.12.4-alt1.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-script updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Closed bugs
incorrect "asm volatile" statements rejected by gcc8-8.2.1-alt3
Package qt5-x11extras updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-imageformats updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-quickcontrols2 updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-connectivity updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-serialbus updated to version 5.12.4-alt1.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-translations updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-graphicaleffects updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-wayland updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-webengine updated to version 5.12.4-alt1.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-virtualkeyboard updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-charts updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-speech updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-datavis3d updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-gamepad updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package qt5-webview updated to version 5.12.4-alt0.M80C.1 for branch c8.1 in task 235556.
Closed vulnerabilities
BDU:2019-00921
Уязвимость функции QGifHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-00922
Уязвимость функции QXMLStreamReader компонента QXmlStream кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2019-00951
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
BDU:2021-03456
Уязвимость компонента qsvghandler.cpp кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с недостатком механизма проверки вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03457
Уязвимость компонента QTgaFile кроссплатформенного фреймворка для разработки программного обеспечения Qt, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-15518
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- https://codereview.qt-project.org/#/c/236691/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19865
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1263
- openSUSE-SU-2019:1259
- openSUSE-SU-2019:1259
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/243666/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244569/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244687/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/244845/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245283/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245293/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245312/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245638/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/245640/
- https://codereview.qt-project.org/#/c/246630/
- https://codereview.qt-project.org/#/c/246630/
Modified: 2024-11-21
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
- openSUSE-SU-2019:1116
- openSUSE-SU-2019:1116
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/234142/
- https://codereview.qt-project.org/#/c/234142/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2422-1] qtsvg-opensource-src security update
Modified: 2024-11-21
CVE-2018-19870
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
- openSUSE-SU-2019:1239
- openSUSE-SU-2019:1239
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/235998/
- https://codereview.qt-project.org/#/c/235998/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Modified: 2024-11-21
CVE-2018-19871
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
- openSUSE-SU-2019:1115
- openSUSE-SU-2019:1115
- RHSA-2019:2135
- RHSA-2019:2135
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/237761/
- https://codereview.qt-project.org/#/c/237761/
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
Modified: 2025-02-11
CVE-2018-19873
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
- openSUSE-SU-2018:4261
- openSUSE-SU-2018:4261
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1452
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1500
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1501
- openSUSE-SU-2020:1530
- openSUSE-SU-2020:1530
- RHSA-2019:2135
- RHSA-2019:2135
- RHSA-2019:3390
- RHSA-2019:3390
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- https://codereview.qt-project.org/#/c/238749/
- https://codereview.qt-project.org/#/c/238749/
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190103 [SECURITY] [DLA 1627-1] qtbase-opensource-src security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20190514 [SECURITY] [DLA 1786-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2377-1] qt4-x11 security update
- USN-4003-1
- USN-4003-1
- DSA-4374
- DSA-4374
Package libspice-gtk updated to version 0.34-alt0.M80C.1 for branch c8.1 in task 237139.
Closed vulnerabilities
Modified: 2024-11-21
CVE-2016-3066
The spice-gtk widget allows remote authenticated users to obtain information from the host clipboard.
Closed vulnerabilities
BDU:2019-04705
Уязвимость реализации протокола маршрутизации пакетов в Unix-подобных операционных системах bird, связанная с копированием буфера без проверки размера входных данных, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2019-16159
BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemon's support for RFC 8203 administrative shutdown communication messages included an incorrect logical expression when checking the validity of an input message. Sending a shutdown communication with a sufficient message length causes a four-byte overflow to occur while processing the message, where two of the overflow bytes are attacker-controlled and two are fixed.
- http://bird.network.cz
- http://bird.network.cz
- openSUSE-SU-2019:2178
- openSUSE-SU-2019:2178
- openSUSE-SU-2019:2180
- openSUSE-SU-2019:2180
- http://trubka.network.cz/pipermail/bird-users/2019-September/013718.html
- http://trubka.network.cz/pipermail/bird-users/2019-September/013718.html
- http://trubka.network.cz/pipermail/bird-users/2019-September/013720.html
- http://trubka.network.cz/pipermail/bird-users/2019-September/013720.html
- http://trubka.network.cz/pipermail/bird-users/2019-September/013722.html
- http://trubka.network.cz/pipermail/bird-users/2019-September/013722.html
- https://gitlab.labs.nic.cz/labs/bird/commit/1657c41c96b3c07d9265b07dd4912033ead4124b
- https://gitlab.labs.nic.cz/labs/bird/commit/1657c41c96b3c07d9265b07dd4912033ead4124b
- https://gitlab.labs.nic.cz/labs/bird/commit/8388f5a7e14108a1458fea35bfbb5a453e2c563c
- https://gitlab.labs.nic.cz/labs/bird/commit/8388f5a7e14108a1458fea35bfbb5a453e2c563c
- FEDORA-2019-ace80f492e
- FEDORA-2019-ace80f492e
- FEDORA-2019-b629e3b97f
- FEDORA-2019-b629e3b97f
- 20190920 [SECURITY] [DSA 4528-1] bird security update
- 20190920 [SECURITY] [DSA 4528-1] bird security update
- DSA-4528
- DSA-4528