Skip to content
OpenAdvisories
Medium ALAS2-2020-1543 3 CVEs

Moderate: qt5-qtbase security update (Amazon Linux 2)

Published Oct 22, 2020 · Updated Aug 3, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-24742: An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory, allowing attackers to execute arbitrary code via crafted files. CVE-2020-0570: Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access. CVE-2020-0569: Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access.

Fixed packages 12

ReleasePackageFixed in
Amazon Linux · 2 qt5-qtbase 0:5.9.2-3.amzn2.0.3
Amazon Linux · 2 qt5-qtbase-common 0:5.9.2-3.amzn2.0.3
Amazon Linux · 2 qt5-qtbase-debuginfo 0:5.9.2-3.amzn2.0.3
Amazon Linux · 2 qt5-qtbase-devel 0:5.9.2-3.amzn2.0.3
Amazon Linux · 2 qt5-qtbase-doc 0:5.9.2-3.amzn2.0.3
Amazon Linux · 2 qt5-qtbase-examples 0:5.9.2-3.amzn2.0.3
Amazon Linux · 2 qt5-qtbase-gui 0:5.9.2-3.amzn2.0.3
Amazon Linux · 2 qt5-qtbase-mysql 0:5.9.2-3.amzn2.0.3
Amazon Linux · 2 qt5-qtbase-odbc 0:5.9.2-3.amzn2.0.3
Amazon Linux · 2 qt5-qtbase-postgresql 0:5.9.2-3.amzn2.0.3
Amazon Linux · 2 qt5-qtbase-static 0:5.9.2-3.amzn2.0.3
Amazon Linux · 2 qt5-rpm-macros 0:5.9.2-3.amzn2.0.3

Vulnerabilities 3

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2020-0569.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2020-0570.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2020-24742.html