Medium ALAS2-2023-2159 1 CVE

Moderate: qt5-qtbase security update (Amazon Linux 2)

Published Jul 20, 2023 · Updated Jul 25, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-32763: In QT, there is an integer overflow in qfixed_p.h when rendering SVG image on the minimal plugin.

Fixed packages 12

Release	Package	Fixed in
Amazon Linux · 2	qt5-qtbase	0:5.9.2-3.amzn2.0.8
Amazon Linux · 2	qt5-qtbase-common	0:5.9.2-3.amzn2.0.8
Amazon Linux · 2	qt5-qtbase-debuginfo	0:5.9.2-3.amzn2.0.8
Amazon Linux · 2	qt5-qtbase-devel	0:5.9.2-3.amzn2.0.8
Amazon Linux · 2	qt5-qtbase-doc	0:5.9.2-3.amzn2.0.8
Amazon Linux · 2	qt5-qtbase-examples	0:5.9.2-3.amzn2.0.8
Amazon Linux · 2	qt5-qtbase-gui	0:5.9.2-3.amzn2.0.8
Amazon Linux · 2	qt5-qtbase-mysql	0:5.9.2-3.amzn2.0.8
Amazon Linux · 2	qt5-qtbase-odbc	0:5.9.2-3.amzn2.0.8
Amazon Linux · 2	qt5-qtbase-postgresql	0:5.9.2-3.amzn2.0.8
Amazon Linux · 2	qt5-qtbase-static	0:5.9.2-3.amzn2.0.8
Amazon Linux · 2	qt5-rpm-macros	0:5.9.2-3.amzn2.0.8

Vulnerabilities 1

Unscored —

CVE-2023-32763

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. When a SVG file w…

qtbase-opensource-src qtbase-opensource-src qt6-base qt6-base Debian Ubuntu Azure Linux Alpine

May 28, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-32763.html