Red Hat Security Advisory: qt security update

Fixed packages 60

Vulnerabilities 6

• Unscored —
  CVE-2018-15518

  QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML do…

  qtbase-opensource-src qtbase-opensource-src Debian Ubuntu
  Dec 26, 2018
• Unscored —
  CVE-2018-19869

  An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.

  qt4-x11 qtsvg-opensource-src qtsvg-opensource-src Debian Ubuntu
  Dec 26, 2018
• Unscored —
  CVE-2018-19870

  An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler res…

  qtbase-opensource-src qtbase-opensource-src Debian Ubuntu
  Dec 26, 2018
• Unscored —
  CVE-2018-19871

  An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.

  qt4-x11 qtimageformats-opensource-src qtimageformats-opensource-src Debian Ubuntu
  Dec 26, 2018
• Unscored —
  CVE-2018-19872

  An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp.

  qtbase-opensource-src qtbase-opensource-src Debian Ubuntu
  Mar 15, 2019
• Unscored —
  CVE-2018-19873

  An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.

  qtbase-opensource-src qtbase-opensource-src Debian Ubuntu
  Dec 26, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1658996
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1658998
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1659000
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1661460
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1661465
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1691636
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1172.json
• report
  https://access.redhat.com/security/cve/CVE-2018-15518
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-15518
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-15518
• report
  https://access.redhat.com/security/cve/CVE-2018-19869
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-19869
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-19869
• report
  https://access.redhat.com/security/cve/CVE-2018-19870
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-19870
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-19870
• report
  https://access.redhat.com/security/cve/CVE-2018-19871
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-19871
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-19871
• report
  https://access.redhat.com/security/cve/CVE-2018-19872
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-19872
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-19872
• article
  https://bugreports.qt.io/browse/QTBUG-69449
• article
  https://wiki.qt.io/Qt_5.11.3_Change_Files
• report
  https://access.redhat.com/security/cve/CVE-2018-19873
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-19873
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-19873