Summary
[1:4.8.7-8]
- Fix QImage allocation failure in qgifhandler
Resolves: bz#1667863
- Fix QTgaFile CPU exhaustion
Resolves: bz#1667879
- Fix QBmpHandler segmentation fault on malformed BMP file
Resolves: bz#1667862
[1:4.8.7-7]
- Fix crash when parsing malformed url reference in svg
Resolves: bz#1667882
[1:4.8.7-6]
- Fix crash in qppmhandler for certain malformed image files
Resolves: bz#1702031
[1:4.8.7-5]
- Fix possible heap corruption in QXmlStream
Resolves: bz#1667861
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | qt | 1:4.8.7-8.el7 |
| Oracle Linux · 7 | qt-assistant | 1:4.8.7-8.el7 |
| Oracle Linux · 7 | qt-config | 1:4.8.7-8.el7 |
| Oracle Linux · 7 | qt-demos | 1:4.8.7-8.el7 |
| Oracle Linux · 7 | qt-devel | 1:4.8.7-8.el7 |
| Oracle Linux · 7 | qt-devel-private | 1:4.8.7-8.el7 |
| Oracle Linux · 7 | qt-doc | 1:4.8.7-8.el7 |
| Oracle Linux · 7 | qt-examples | 1:4.8.7-8.el7 |
| Oracle Linux · 7 | qt-mysql | 1:4.8.7-8.el7 |
| Oracle Linux · 7 | qt-odbc | 1:4.8.7-8.el7 |
| Oracle Linux · 7 | qt-postgresql | 1:4.8.7-8.el7 |
| Oracle Linux · 7 | qt-qdbusviewer | 1:4.8.7-8.el7 |
| Oracle Linux · 7 | qt-qvfb | 1:4.8.7-8.el7 |
| Oracle Linux · 7 | qt-x11 | 1:4.8.7-8.el7 |
Vulnerabilities 6
-
Unscored —
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML do…
-
Unscored —
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
-
Unscored —
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler res…
-
Unscored —
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
-
Unscored —
An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp.
-
Unscored —
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.