Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-17507: An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. read_xbm_body in gui/image/qxbmhandler.cpp has a buffer over-read. 1868532: CVE-2020-17507 qt: buffer over-read in read_xbm_body in gui/image/qxbmhandler.cpp
Fixed packages 27
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | qt | 1:4.8.5-15.amzn2.0.5 |
| Amazon Linux · 2 | qt-assistant | 1:4.8.5-15.amzn2.0.5 |
| Amazon Linux · 2 | qt-config | 1:4.8.5-15.amzn2.0.5 |
| Amazon Linux · 2 | qt-debuginfo | 1:4.8.5-15.amzn2.0.5 |
| Amazon Linux · 2 | qt-demos | 1:4.8.5-15.amzn2.0.5 |
| Amazon Linux · 2 | qt-devel | 1:4.8.5-15.amzn2.0.5 |
| Amazon Linux · 2 | qt-devel-private | 1:4.8.5-15.amzn2.0.5 |
| Amazon Linux · 2 | qt-doc | 1:4.8.5-15.amzn2.0.5 |
| Amazon Linux · 2 | qt-examples | 1:4.8.5-15.amzn2.0.5 |
| Amazon Linux · 2 | qt-mysql | 1:4.8.5-15.amzn2.0.5 |
| Amazon Linux · 2 | qt-odbc | 1:4.8.5-15.amzn2.0.5 |
| Amazon Linux · 2 | qt-postgresql | 1:4.8.5-15.amzn2.0.5 |
| Amazon Linux · 2 | qt-qdbusviewer | 1:4.8.5-15.amzn2.0.5 |
| Amazon Linux · 2 | qt-qvfb | 1:4.8.5-15.amzn2.0.5 |
| Amazon Linux · 2 | qt-x11 | 1:4.8.5-15.amzn2.0.5 |
| Amazon Linux · 2 | qt5-qtbase | 0:5.9.2-3.amzn2.0.4 |
| Amazon Linux · 2 | qt5-qtbase-common | 0:5.9.2-3.amzn2.0.4 |
| Amazon Linux · 2 | qt5-qtbase-debuginfo | 0:5.9.2-3.amzn2.0.4 |
| Amazon Linux · 2 | qt5-qtbase-devel | 0:5.9.2-3.amzn2.0.4 |
| Amazon Linux · 2 | qt5-qtbase-doc | 0:5.9.2-3.amzn2.0.4 |
| Amazon Linux · 2 | qt5-qtbase-examples | 0:5.9.2-3.amzn2.0.4 |
| Amazon Linux · 2 | qt5-qtbase-gui | 0:5.9.2-3.amzn2.0.4 |
| Amazon Linux · 2 | qt5-qtbase-mysql | 0:5.9.2-3.amzn2.0.4 |
| Amazon Linux · 2 | qt5-qtbase-odbc | 0:5.9.2-3.amzn2.0.4 |
| Amazon Linux · 2 | qt5-qtbase-postgresql | 0:5.9.2-3.amzn2.0.4 |
| Amazon Linux · 2 | qt5-qtbase-static | 0:5.9.2-3.amzn2.0.4 |
| Amazon Linux · 2 | qt5-rpm-macros | 0:5.9.2-3.amzn2.0.4 |
Vulnerabilities 1
-
Unscored —
An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. read_xbm_body in gui/image/qxbmh…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2020-17507.html