Skip to content
OpenAdvisories
Medium ALSA-2023:6369 5 CVEs

Moderate: qt5 security and bug fix update

Published Nov 7, 2023 · Updated Nov 9, 2026

Ecosystem: AlmaLinux

Summary

Qt is a software toolkit for developing applications.

Security Fix(es):

* qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285)
* qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410)
* qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369)
* qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197)
* qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fixed packages 14

ReleasePackageFixed in
AlmaLinux · 9 qt5 5.15.9-1.el9
AlmaLinux · 9 qt5-devel 5.15.9-1.el9
AlmaLinux · 9 qt5-qtbase 5.15.9-7.el9
AlmaLinux · 9 qt5-qtbase-common 5.15.9-7.el9
AlmaLinux · 9 qt5-qtbase-devel 5.15.9-7.el9
AlmaLinux · 9 qt5-qtbase-examples 5.15.9-7.el9
AlmaLinux · 9 qt5-qtbase-gui 5.15.9-7.el9
AlmaLinux · 9 qt5-qtbase-mysql 5.15.9-7.el9
AlmaLinux · 9 qt5-qtbase-odbc 5.15.9-7.el9
AlmaLinux · 9 qt5-qtbase-postgresql 5.15.9-7.el9
AlmaLinux · 9 qt5-qtbase-private-devel 5.15.9-7.el9
AlmaLinux · 9 qt5-qtbase-static 5.15.9-7.el9
AlmaLinux · 9 qt5-rpm-macros 5.15.9-1.el9
AlmaLinux · 9 qt5-srpm-macros 5.15.9-1.el9

Vulnerabilities 5

References

  • report
    https://access.redhat.com/security/cve/CVE-2023-32573
  • report
    https://access.redhat.com/security/cve/CVE-2023-33285
  • report
    https://access.redhat.com/security/cve/CVE-2023-34410
  • report
    https://access.redhat.com/security/cve/CVE-2023-37369
  • report
    https://access.redhat.com/security/cve/CVE-2023-38197
  • report
    https://bugzilla.redhat.com/2175724
  • report
    https://bugzilla.redhat.com/2175726
  • report
    https://bugzilla.redhat.com/2175727
  • report
    https://bugzilla.redhat.com/2175728
  • report
    https://bugzilla.redhat.com/2175729
  • report
    https://bugzilla.redhat.com/2175730
  • report
    https://bugzilla.redhat.com/2175731
  • report
    https://bugzilla.redhat.com/2175733
  • report
    https://bugzilla.redhat.com/2175734
  • report
    https://bugzilla.redhat.com/2175735
  • report
    https://bugzilla.redhat.com/2175736
  • report
    https://bugzilla.redhat.com/2175737
  • report
    https://bugzilla.redhat.com/2175738
  • report
    https://bugzilla.redhat.com/2175739
  • report
    https://bugzilla.redhat.com/2175740
  • report
    https://bugzilla.redhat.com/2175741
  • report
    https://bugzilla.redhat.com/2175742
  • report
    https://bugzilla.redhat.com/2175743
  • report
    https://bugzilla.redhat.com/2175744
  • report
    https://bugzilla.redhat.com/2175745
  • report
    https://bugzilla.redhat.com/2175746
  • report
    https://bugzilla.redhat.com/2175747
  • report
    https://bugzilla.redhat.com/2175749
  • report
    https://bugzilla.redhat.com/2175750
  • report
    https://bugzilla.redhat.com/2175751
  • report
    https://bugzilla.redhat.com/2175753
  • report
    https://bugzilla.redhat.com/2175754
  • report
    https://bugzilla.redhat.com/2175758
  • report
    https://bugzilla.redhat.com/2178624
  • report
    https://bugzilla.redhat.com/2188589
  • report
    https://bugzilla.redhat.com/2208135
  • report
    https://bugzilla.redhat.com/2209488
  • report
    https://bugzilla.redhat.com/2212747
  • report
    https://bugzilla.redhat.com/2222767