ELSA-2020-4690 — Moderate: qt5-qtbase and qt5-qtwebsockets security and bug fix update (Oracle Linux 8)

Summary

qt5-qtbase
[5.12.5-6]
- OpenSSL: handle SSL_shutdowns errors properly
Resolves: bz#1851538

[5.12.5-5]
- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
Resolves: bz#1814739
Resolves: bz#1814683

- Fix: XML entity expansion vulnerability
Resolves: bz#1822193

qt5-qttools
[5.12.5-2]
- Rebuild (LLVM-10)
Resolves: bz#1832857

qt5-qtwebsockets
[5.12.5-2]
- Add a public api to set max frame and message size
Resolves: bz#1815187

Fixed packages 26

Release	Package	Fixed in
Oracle Linux · 8	qt5-assistant	0:5.12.5-2.el8
Oracle Linux · 8	qt5-designer	0:5.12.5-2.el8
Oracle Linux · 8	qt5-doctools	0:5.12.5-2.el8
Oracle Linux · 8	qt5-linguist	0:5.12.5-2.el8
Oracle Linux · 8	qt5-qdbusviewer	0:5.12.5-2.el8
Oracle Linux · 8	qt5-qtbase	0:5.12.5-6.el8
Oracle Linux · 8	qt5-qtbase-common	0:5.12.5-6.el8
Oracle Linux · 8	qt5-qtbase-devel	0:5.12.5-6.el8
Oracle Linux · 8	qt5-qtbase-examples	0:5.12.5-6.el8
Oracle Linux · 8	qt5-qtbase-gui	0:5.12.5-6.el8
Oracle Linux · 8	qt5-qtbase-mysql	0:5.12.5-6.el8
Oracle Linux · 8	qt5-qtbase-odbc	0:5.12.5-6.el8
Oracle Linux · 8	qt5-qtbase-postgresql	0:5.12.5-6.el8
Oracle Linux · 8	qt5-qtbase-private-devel	0:5.12.5-6.el8
Oracle Linux · 8	qt5-qtbase-static	0:5.12.5-6.el8
Oracle Linux · 8	qt5-qttools	0:5.12.5-2.el8
Oracle Linux · 8	qt5-qttools-common	0:5.12.5-2.el8
Oracle Linux · 8	qt5-qttools-devel	0:5.12.5-2.el8
Oracle Linux · 8	qt5-qttools-examples	0:5.12.5-2.el8
Oracle Linux · 8	qt5-qttools-libs-designer	0:5.12.5-2.el8
Oracle Linux · 8	qt5-qttools-libs-designercomponents	0:5.12.5-2.el8
Oracle Linux · 8	qt5-qttools-libs-help	0:5.12.5-2.el8
Oracle Linux · 8	qt5-qttools-static	0:5.12.5-2.el8
Oracle Linux · 8	qt5-qtwebsockets	0:5.12.5-2.el8
Oracle Linux · 8	qt5-qtwebsockets-devel	0:5.12.5-2.el8
Oracle Linux · 8	qt5-qtwebsockets-examples	0:5.12.5-2.el8

Vulnerabilities 5

High 8.6

CVE-2018-21035

In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits ca…

qt5-qtsvg qtwebsockets-opensource-src qtwebsockets-opensource-src Debian Ubuntu Azure Linux

Feb 28, 2020
Unscored —

CVE-2015-9541

Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXml…

qtbase-opensource-src qtbase-opensource-src qt4-x11 qt5-qtsvg Debian Ubuntu Azure Linux

Jan 24, 2020
Unscored —

CVE-2020-0569

Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentia…

qtbase-opensource-src qtbase-opensource-src Windows Debian Ubuntu

Nov 23, 2020
Unscored —

CVE-2020-0570

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentia…

qtbase-opensource-src qt5-qtsvg Debian Azure Linux

Sep 14, 2020
Unscored —

CVE-2020-13962

Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error q…

qtbase-opensource-src qtbase-opensource-src qt5-qtsvg Debian Ubuntu Azure Linux

Jun 8, 2020

Moderate: qt5-qtbase and qt5-qtwebsockets security and bug fix update (Oracle Linux 8)

Summary

Fixed packages 26

Vulnerabilities 5

In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits ca…

Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXml…

Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentia…

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentia…

Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error q…