Summary
[5.15.3-5]
- Fix infinite loops in QXmlStreamReader (CVE-2023-38197)
Resolves: bz#2222770
[5.15.3-4]
- Don't allow remote attacker to bypass security restrictions caused by
flaw in certificate validation (CVE-2023-34410) (version #2)
Resolves: bz#2212753
[5.15.3-3]
- Don't allow remote attacker to bypass security restrictions caused by
flaw in certificate validation (CVE-2023-34410)
Resolves: bz#2212753
[5.15.3-2]
- Fix specific overflow in qtextlayout
- Fix incorrect parsing of the strict-transport-security (HSTS) header
- Fix buffer over-read via a crafted reply from a DNS server
Resolves: bz#2209491
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | qt5-qtbase | 0:5.15.3-5.el8 |
| Oracle Linux · 8 | qt5-qtbase-common | 0:5.15.3-5.el8 |
| Oracle Linux · 8 | qt5-qtbase-devel | 0:5.15.3-5.el8 |
| Oracle Linux · 8 | qt5-qtbase-examples | 0:5.15.3-5.el8 |
| Oracle Linux · 8 | qt5-qtbase-gui | 0:5.15.3-5.el8 |
| Oracle Linux · 8 | qt5-qtbase-mysql | 0:5.15.3-5.el8 |
| Oracle Linux · 8 | qt5-qtbase-odbc | 0:5.15.3-5.el8 |
| Oracle Linux · 8 | qt5-qtbase-postgresql | 0:5.15.3-5.el8 |
| Oracle Linux · 8 | qt5-qtbase-private-devel | 0:5.15.3-5.el8 |
| Oracle Linux · 8 | qt5-qtbase-static | 0:5.15.3-5.el8 |
Vulnerabilities 4
-
High 7.5
An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infini…
-
Medium 5.3
An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup ha…
-
Medium 5.3
An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate valid…
-
Unscored —
In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXml…