ALT-PU-2020-1743-1
Package qt5-webengine updated to version 5.12.8-alt1 for branch sisyphus in task 249726.
Closed vulnerabilities
Published: 2020-01-25
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2015-9541
Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564.
Severity: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References: