Summary
Qt is a software toolkit for developing applications.
Security Fix(es):
* qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285)
* qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410)
* qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369)
* qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197)
* qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.
Fixed packages 26
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 9 | adwaita-qt | 0:1.4.2-1.el9 |
| Rocky Linux · 9 | python-pyqt5-sip | 0:12.11.1-1.el9.0.1 |
| Rocky Linux · 9 | python-qt5 | 0:5.15.9-1.el9 |
| Rocky Linux · 9 | qgnomeplatform | 0:0.9.0-1.el9 |
| Rocky Linux · 9 | qt5 | 0:5.15.9-1.el9 |
| Rocky Linux · 9 | qt5-doc | 0:5.15.9-1.el9 |
| Rocky Linux · 9 | qt5-qtconnectivity | 0:5.15.9-2.el9 |
| Rocky Linux · 9 | qt5-qtdeclarative | 0:5.15.9-3.el9 |
| Rocky Linux · 9 | qt5-qtdoc | 0:5.15.9-1.el9 |
| Rocky Linux · 9 | qt5-qtgraphicaleffects | 0:5.15.9-1.el9 |
| Rocky Linux · 9 | qt5-qtimageformats | 0:5.15.9-1.el9 |
| Rocky Linux · 9 | qt5-qtlocation | 0:5.15.9-1.el9 |
| Rocky Linux · 9 | qt5-qtmultimedia | 0:5.15.9-1.el9 |
| Rocky Linux · 9 | qt5-qtquickcontrols | 0:5.15.9-1.el9 |
| Rocky Linux · 9 | qt5-qtquickcontrols2 | 0:5.15.9-1.el9 |
| Rocky Linux · 9 | qt5-qtscript | 0:5.15.9-1.el9 |
| Rocky Linux · 9 | qt5-qtsensors | 0:5.15.9-1.el9 |
| Rocky Linux · 9 | qt5-qtserialbus | 0:5.15.9-1.el9 |
| Rocky Linux · 9 | qt5-qtserialport | 0:5.15.9-1.el9 |
| Rocky Linux · 9 | qt5-qtsvg | 0:5.15.9-2.el9 |
| Rocky Linux · 9 | qt5-qttranslations | 0:5.15.9-1.el9 |
| Rocky Linux · 9 | qt5-qtwayland | 0:5.15.9-1.el9 |
| Rocky Linux · 9 | qt5-qtwebchannel | 0:5.15.9-1.el9 |
| Rocky Linux · 9 | qt5-qtwebsockets | 0:5.15.9-2.el9 |
| Rocky Linux · 9 | qt5-qtx11extras | 0:5.15.9-1.el9 |
| Rocky Linux · 9 | qt5-qtxmlpatterns | 0:5.15.9-2.el9 |
Vulnerabilities 5
-
High 7.5
An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infini…
-
Medium 6.5
In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont m_unitsPer…
-
Medium 5.3
An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup ha…
-
Medium 5.3
An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate valid…
-
Unscored —
In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXml…